General
-
Target
a9077bf1ac028f6d8bf54fababe68438_JaffaCakes118
-
Size
4.2MB
-
MD5
a9077bf1ac028f6d8bf54fababe68438
-
SHA1
545ba806422958a5c84176de38b61b43838db578
-
SHA256
9147922bb5add1b94c56ce4af0daa0127b7e916e29292c7a0f73127468e41c0f
-
SHA512
eff4814739774c79be5f2c3d69c70660351d9ca07cfd78e051e33630adffd8daddd3040721c181ace35f7f042e9e90071811b634c4f34973c5e408597770ec77
-
SSDEEP
98304:CAVMYiz8jsFWvZWV5enKST532yQQjCs3nhztu3OUdWzW:dMLgjsFWvZWV5enpgQ/teOrW
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a9077bf1ac028f6d8bf54fababe68438_JaffaCakes118
Files
-
a9077bf1ac028f6d8bf54fababe68438_JaffaCakes118.exe windows:10 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 476KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 963KB - Virtual size: 964KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ