jaffacakes118__9476df7cfffdbfaa3e7a6ba11842340e

General

Target
jaffacakes118__9476df7cfffdbfaa3e7a6ba11842340e
Size 24KB
Sample260919-p6tfcsff23
SHA256 46b4e67d97b4ff56f75839528979cdc036d21af4c77d316840c3c7fe282065e9
MD5 9476df7cfffdbfaa3e7a6ba11842340e
SHA1 619eb70d81b8ef4ce509e665919cba817d938356
SHA512 69c2d26c4a27347aa4ed480b0b2bde62bf5029677f7a7842eaa0021b2da0e5a3b8da55f116852b1f81b093c483fd852e147519c78fc7a9d1ce8193d5aa1dc008
SSDEEP 768:bFLJTgFlaK3I4p/Bjh3I6WbSTO2K0Mk/Z/xqS:hFMF3I4x3I62sK0L/Zk
TLSH
T1EFB2D0CB578250E7D26B24F658D373018E7A74C9427AE6A24B7B75F8F8938E0B2C0421
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118__9476df7cfffdbfaa3e7a6ba11842340e
unpack001/out.upx

File Explorer

jaffacakes118__9476df7cfffdbfaa3e7a6ba11842340e

.exe 24KB
out.upx

.exe 47KB

jaffacakes118__9476df7cfffdbfaa3e7a6ba11842340e

SHA256 46b4e67d97b4ff56f75839528979cdc036d21af4c77d316840c3c7fe282065e9
MD5 9476df7cfffdbfaa3e7a6ba11842340e
SHA1 619eb70d81b8ef4ce509e665919cba817d938356
SHA512 69c2d26c4a27347aa4ed480b0b2bde62bf5029677f7a7842eaa0021b2da0e5a3b8da55f116852b1f81b093c483fd852e147519c78fc7a9d1ce8193d5aa1dc008
SSDEEP 768:bFLJTgFlaK3I4p/Bjh3I6WbSTO2K0Mk/Z/xqS:hFMF3I4x3I62sK0L/Zk
TLSH
T1EFB2D0CB578250E7D26B24F658D373018E7A74C9427AE6A24B7B75F8F8938E0B2C0421
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

60016

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

out.upx

SHA256 72ccfada786b76da671a6e9b34f6d2c44a275c3f41e3661b51f71e924a49111b
MD5 c632e6225bdc3aa4b08eabc882cc2ed0
SHA1 4424cd65f5bdae5034abb2154dfbe59e6d94c2e5
SHA512 cee7093cc136ad3acf02925481da415f5e21d558d6befbeb1f0d9f8400469ec014e4a51b7c1797d4987bd96c93dceb6b404df9d54278c8571a36e3a4111e1be9
SSDEEP 768:MAHYjqn/CxtPXEKoLG9EIK1aDD0yz9PkMpEIifI4IXyuQNTPkn:D0xpXEKt9ytg9PmpmyuQNT
TLSH
T10A239F505AA196ECF85338F45E8EE22FA1575200263F5F17BA40CCE41938CABF69F497
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

8752

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

jaffacakes118__9476df7cfffdbfaa3e7a6ba11842340e

generic

out.upx

generic

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118__9476df7cfffdbfaa3e7a6ba11842340e

generic

out.upx

generic