jaffacakes118__9356e7307dd80cded3aec898efb24288

General

Target
jaffacakes118__9356e7307dd80cded3aec898efb24288
Size 180KB
Sample260919-ps182sfd94
SHA256 cec98bc7f0ffdeeda01da23c33e707b6a7319f98ebb05b2bf6b2456161327f0e
MD5 9356e7307dd80cded3aec898efb24288
SHA1 e149c211827218a4c11a71690a556d3962640ab8
SHA512 f43c1cfb8e84e4d37c22ba7d0c33db6ca7e70d77d480f1791c1078e5dfafb1ef6ff469d8abec8c8e8d4c32f08b09afc2a5418eca80113c951940d9676ac1db3f
SSDEEP 3072:3fHlF1r1ImerIDo4WQ4VhsV4HEMN9jlIYRDqB7iXcv8U0r:Q4WsykE/DgN0/
TLSH
T1EE0402C9DA80068BE7135D7E0A0695938B73991F6F66C41C3A00BAC2F5F26149372FB7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118__9356e7307dd80cded3aec898efb24288
unpack001/out.upx

File Explorer

jaffacakes118__9356e7307dd80cded3aec898efb24288

.exe 180KB
out.upx

.exe 100KB

jaffacakes118__9356e7307dd80cded3aec898efb24288

SHA256 cec98bc7f0ffdeeda01da23c33e707b6a7319f98ebb05b2bf6b2456161327f0e
MD5 9356e7307dd80cded3aec898efb24288
SHA1 e149c211827218a4c11a71690a556d3962640ab8
SHA512 f43c1cfb8e84e4d37c22ba7d0c33db6ca7e70d77d480f1791c1078e5dfafb1ef6ff469d8abec8c8e8d4c32f08b09afc2a5418eca80113c951940d9676ac1db3f
SSDEEP 3072:3fHlF1r1ImerIDo4WQ4VhsV4HEMN9jlIYRDqB7iXcv8U0r:Q4WsykE/DgN0/
TLSH
T1EE0402C9DA80068BE7135D7E0A0695938B73991F6F66C41C3A00BAC2F5F26149372FB7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

194016

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

out.upx

SHA256 f2daac84f0a9fc04be87d166e7e9a226c28e1fdf1642d882632773ab4cab497a
MD5 42901463544ee08ebe366164f7067a2d
SHA1 0ad39d6f58dd775609535d1f73a70f9f30a056ef
SHA512 1b4e848f02179958dba388e3736f08ed1315218a45e91eb8733484985998efe5d2083ded7765a74ce8ebb5986ebdedbe4e67e5d3eda6796f7f5682c60f40583c
SSDEEP 1536:nW6q3PPfRDq86125WkMVmCJ1u8STUmykF5DWhXtwveQZ0xHlQtRu+E1R:8PPfRDqR12MztSTUBs5DWhXyr0vw3mR
TLSH
T1C3A3BD85664707DBD20359B045368AF287266D7D276D79DC2630B7A0DC3ED30CE73A4A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

77832

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

jaffacakes118__9356e7307dd80cded3aec898efb24288

generic

out.upx

generic

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118__9356e7307dd80cded3aec898efb24288

generic

out.upx

generic