General
-
Target
878253b8980d78e7b72bf4635d0c75a9_JaffaCakes118
-
Size
126KB
-
MD5
878253b8980d78e7b72bf4635d0c75a9
-
SHA1
b4c3fb76daa1dbebd0c52a6419b7ad813d62d39f
-
SHA256
17d091ba0c27913a849d61815d314c396425fbfed672af25f0e79838ef04dbc8
-
SHA512
1a2e549c013015331bcdf881f8304cd898ed8da24ff17da58d8549b23c5c2217ccbdab382c9d57fac5e6a70625fb118148cb74ec892d4c322e4d00fcb679d2b7
-
SSDEEP
3072:BOezsPBXaeEVzwlXqAUI+JFdO67EBNZMQvLxv8PPSa7+D2YZW/P:B1RVoXqbIUJoBNJvF8PKaAhc
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 878253b8980d78e7b72bf4635d0c75a9_JaffaCakes118
Files
-
878253b8980d78e7b72bf4635d0c75a9_JaffaCakes118.exe windows:10 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 160KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 123KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xdata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE