jaffacakes118__73aa525b0f9973c844b675d92540a303

General

Target
jaffacakes118__73aa525b0f9973c844b675d92540a303
Size 15KB
Sample260919-hapnzahn3v
SHA256 691740dae0d54038817b33d9e58eadc1352b492d04c0bb733a1ac61102893e5c
MD5 73aa525b0f9973c844b675d92540a303
SHA1 89dd4990b2fc1723966c6166b5e3e0cbd5e9917f
SHA512 16fc991aff043816f9082eef6c4067d4463f0b2e8664219f90926fe70da506fe6b8162e8eb896ce2f3cd182c819d2312722f7bbdcf9091f7be248b5bf73288fc
SSDEEP 192:/TQnyNCDdlvio467ogDBeVRlcxzWLH15sOZXFR1MLTikVnEjVYhjCJYUvm:/THCbior7fBeVLcxzm15pF+VnEjexKm
TLSH
T10B626D51F7ABA4E2F582857A0DB3CF328411BD644A5A879F3A147F5F1D34308A978EA0
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118__73aa525b0f9973c844b675d92540a303
unpack001/out.upx

File Explorer

jaffacakes118__73aa525b0f9973c844b675d92540a303

.exe 15KB
out.upx

.exe 32KB

jaffacakes118__73aa525b0f9973c844b675d92540a303

SHA256 691740dae0d54038817b33d9e58eadc1352b492d04c0bb733a1ac61102893e5c
MD5 73aa525b0f9973c844b675d92540a303
SHA1 89dd4990b2fc1723966c6166b5e3e0cbd5e9917f
SHA512 16fc991aff043816f9082eef6c4067d4463f0b2e8664219f90926fe70da506fe6b8162e8eb896ce2f3cd182c819d2312722f7bbdcf9091f7be248b5bf73288fc
SSDEEP 192:/TQnyNCDdlvio467ogDBeVRlcxzWLH15sOZXFR1MLTikVnEjVYhjCJYUvm:/THCbior7fBeVLcxzm15pF+VnEjexKm
TLSH
T10B626D51F7ABA4E2F582857A0DB3CF328411BD644A5A879F3A147F5F1D34308A978EA0
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

38656

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

out.upx

SHA256 1b92d4939c8e07667fad5c3f4a6d83b3738aaf990cdeb5772b42455bd917fc99
MD5 dac2e731b4a4c15e9e92a34f78a32169
SHA1 7724017863c900f054ccef85c7dc773957b69882
SHA512 3269f530db6d1f4b18f79109cae67880fb3e5816e92d71e6dd5c080bdc53c82855a367414adb36caff044ab9e2ded58dc8eebbdb23da4508a201ff3698fc5f5a
SSDEEP 192:/TltLlRks/aX5OapS4IDsVDxwrVQxAMVYxSkmLlCAVEJyfwOHnsvMLTikVnE:/T0syX5OOS45kmLBVEJyfwOJVnE
TLSH
T174E2610BFB152220F186917429359A1BA8757DB30901DD0BF7857EAC74386C7EAF1B2B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5016

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

jaffacakes118__73aa525b0f9973c844b675d92540a303

generic

out.upx

generic

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118__73aa525b0f9973c844b675d92540a303

generic

out.upx

generic