General
-
Target
afd72f3ace511ddc3bced01edc9e705e_JaffaCakes118
-
Size
155KB
-
MD5
afd72f3ace511ddc3bced01edc9e705e
-
SHA1
e0b6d0bf5b4a9915a6a7d358bded208a9ff8ad4e
-
SHA256
c1196ce470a4131bdab4d3d3de07a61acb883d2ba7b563501c7669f54b63f4cd
-
SHA512
9c01e19d5d3f56a61d6a06596d88fce9933723211c0857832bb3dc71f36eb14976061806e8f0f156416df76cb762286b2426084fa062419b2616a2467df7e963
-
SSDEEP
1536:rnjxTjibkuSfEKdc6+CrSkTUcdfRmj2ZMvJHlByubiY8MLvaw6M9gAgDKzcsZk:rjdjibku2M67rPn7mFLq+mDIXZ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource afd72f3ace511ddc3bced01edc9e705e_JaffaCakes118
Files
-
afd72f3ace511ddc3bced01edc9e705e_JaffaCakes118.exe windows:10 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 70KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE