General
-
Target
8df536a7a5a85f08041acd4e9e87a616_JaffaCakes118
-
Size
140KB
-
MD5
8df536a7a5a85f08041acd4e9e87a616
-
SHA1
ff4d3ef6fcb24444ab2759bf829ec8b26f145438
-
SHA256
62d5bad3c68db48ba6c42320aecabecf1470ac02512e5b4c4d8867e0a7e37203
-
SHA512
4045754d8ea927781d16d78170f549f95a6cbfd2f88ea2c0d40221a3d1efb3554bc2532cdf087744144488053edd199b52943180d18f22ffc2fb704b1e897e0f
-
SSDEEP
3072:RGBgS8hlzD+uUwQUH3rcgGVrKGaxbcVLdovTtvyssO79Umoutyo:I9OKUaKGbldgTqpmoSt
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8df536a7a5a85f08041acd4e9e87a616_JaffaCakes118
Files
-
8df536a7a5a85f08041acd4e9e87a616_JaffaCakes118.exe windows:10 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 184KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 136KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE