General
-
Target
ae9667a7d078350f7c92a1a0987b39a3_JaffaCakes118
-
Size
157KB
-
MD5
ae9667a7d078350f7c92a1a0987b39a3
-
SHA1
d37f0ecb1bc031fbab045ac26115338970cb90f7
-
SHA256
70a6491ccd5cf55ffa9be0cabaa07d859de364c10ad832f02a371a551da5807e
-
SHA512
b39cccd47f0d9e244d33b40d503db8e88433de047c782d654820bf950c9b18896ffea8e85a591b4ddf4c20c26ad0da7be556bf45dfa1199c31ad8856c1153f45
-
SSDEEP
3072:4uN9C2qVxrZ7tunadntfBJ4BDtYrD9nBpmpuICKNI//ooutPO:PGT7zTf/9n7mrFNogoS2
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ae9667a7d078350f7c92a1a0987b39a3_JaffaCakes118
Files
-
ae9667a7d078350f7c92a1a0987b39a3_JaffaCakes118.exe windows:10 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 288KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 153KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE