General
-
Target
b36968c5622066635068fd024d385f6b_JaffaCakes118
-
Size
71KB
-
MD5
b36968c5622066635068fd024d385f6b
-
SHA1
abd7445efb4b45fc01d460ef898d4ae0f37c6a9b
-
SHA256
1577d84d3bc726624cd860c5b353ddc5886cb23fb5c3d3f973b1b5eff1d8c6b2
-
SHA512
753f597004d2c649a2901e643375606d92d866119cf418c2b9ab1921e736eefae6ad76279395419b67b9518f978332432f17d3d6a4c1d938debfd5ec8eeede4d
-
SSDEEP
1536:KP3niR9GKvIbxmMjFIB46rBrQCKq+2J7MeGPQWi6qR8lAHgR/:4niR9LVHtrQDq+s4eGPQr6qR8lQg
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b36968c5622066635068fd024d385f6b_JaffaCakes118
Files
-
b36968c5622066635068fd024d385f6b_JaffaCakes118.exe windows:10 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 188KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 39KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wruliis Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE