General
-
Target
b61fe0ca6655e54e39d1c3d3818761cd_JaffaCakes118
-
Size
47KB
-
MD5
b61fe0ca6655e54e39d1c3d3818761cd
-
SHA1
7eda4c1e1063a3edcc4527e315dd155db43b7ef5
-
SHA256
ead55eefb459b0f45ac2484888a87805da05495694b0bc25063ce78299ec1e42
-
SHA512
42b77b6e28c14123966cda7f30e1aa8284eb78661038a331d3dc496aee06792416721a251a06f4999a7563c8368a9c8324144e5ee6c1172a1f1da890fef49931
-
SSDEEP
768:9+hxgXvPD4/8jk5g6hj4b880yErPNeahr3l5wY986kBuvc6grI7KBR+n4CacY+kd:UW7Tjk5xhJrPNeaH5wWkBGBZI+41/Tnd
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource b61fe0ca6655e54e39d1c3d3818761cd_JaffaCakes118 unpack001/out.upx
Files
-
b61fe0ca6655e54e39d1c3d3818761cd_JaffaCakes118.exe windows:10 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 45KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:10 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.arch Size: 512B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: - Virtual size: 822B
Size: - Virtual size:
Size: - Virtual size:
Size: - Virtual size: