jaffacakes118__26f049268aaf4c84c52b5f0f7e7ef422

General

Target
jaffacakes118__26f049268aaf4c84c52b5f0f7e7ef422
Size 76KB
Sample260920-1dcspazz3j
SHA256 0ca40e1e54aae23211aab4cbaea32c37a044f994e75d6c6eb3f472e42de82abf
MD5 26f049268aaf4c84c52b5f0f7e7ef422
SHA1 2f019788045e8a3534728cd789d0964ec6c0dbf0
SHA512 73d7dbee67bc766a4f0410ad622df974feb27d04e549974dd32d4933b9c3bfb7ed5aeeece62e6ee596554ded06bb3c1ab7a7c1e947354c2a1f7e93a89ab7f67b
SSDEEP 1536:mP5x+TtYtNDjgoSeSQrzw/5HyU0Rj3eoZ7tGPffH1JNucho+JUPqRi4/zO:mxQTazDEoSepwdyUUjuorGPffYc1UPqE
TLSH
T1C373021A18FD0BC1ECBBDB760EEC1A5C5BAC67258B174566D582CB4A43B3F5580B0336
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118__26f049268aaf4c84c52b5f0f7e7ef422
unpack001/out.upx

File Explorer

jaffacakes118__26f049268aaf4c84c52b5f0f7e7ef422

.exe 76KB
out.upx

.exe 145KB

jaffacakes118__26f049268aaf4c84c52b5f0f7e7ef422

SHA256 0ca40e1e54aae23211aab4cbaea32c37a044f994e75d6c6eb3f472e42de82abf
MD5 26f049268aaf4c84c52b5f0f7e7ef422
SHA1 2f019788045e8a3534728cd789d0964ec6c0dbf0
SHA512 73d7dbee67bc766a4f0410ad622df974feb27d04e549974dd32d4933b9c3bfb7ed5aeeece62e6ee596554ded06bb3c1ab7a7c1e947354c2a1f7e93a89ab7f67b
SSDEEP 1536:mP5x+TtYtNDjgoSeSQrzw/5HyU0Rj3eoZ7tGPffH1JNucho+JUPqRi4/zO:mxQTazDEoSepwdyUUjuorGPffYc1UPqE
TLSH
T1C373021A18FD0BC1ECBBDB760EEC1A5C5BAC67258B174566D582CB4A43B3F5580B0336
MD5 SHA1 SHA512 SSDEEP TLSH

windows:7 windows x86 arch:x86

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

7

Entry point

171440

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

out.upx

SHA256 9777c1f6bd361455d119e6faa5cde8ed14cbca60411dc73fba7bcc0603f44544
MD5 75eb003422e8efceac4f6a057ab23c34
SHA1 95511ebab57907301b8f12a979fe58c5f49bd100
SHA512 d8924d557207406ab23990730d11543899cb6ecafea9cab5b6cb39a3791f74526721ab449e0551bcb37687c08081da86962c382670173479dd5843a8697084b2
SSDEEP 1536:CjCbRqA7jSO46CRkTi5NUMxfN8wq1YxKwB8IyLwG4ay3dRKbMswbBFN6G5LtLX:7R5v4taTi5qcfewiPwBryBrgIXiJZRX
TLSH
T1FEE36957C4EB7359F32306F4BA0BF549703A604A74660AB3D82315EB28DCB1156A4BFE
MD5 SHA1 SHA512 SSDEEP TLSH

windows:7 windows x86 arch:x86

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

7

Entry point

4783

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

136KB

Virtual Size

135KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

3KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.arch

Size

1024B

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

jaffacakes118__26f049268aaf4c84c52b5f0f7e7ef422

generic

out.upx

generic

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118__26f049268aaf4c84c52b5f0f7e7ef422

generic

out.upx

generic