General
-
Target
b88340afd213bf5ffd0ff3f15f5f27cb_JaffaCakes118
-
Size
2.4MB
-
MD5
b88340afd213bf5ffd0ff3f15f5f27cb
-
SHA1
81521ac35db410197ba2cb1922ce36df759f545d
-
SHA256
180b629229ca56dd332afb6765b22e8f967773cbdda942a9c4134e104c6deadf
-
SHA512
32aa34d1efdc031065426187f26ccd5d3996fb51ab05e7cdae8bfc08ba3a471d325b7f9b5cd8c0599c90a6b45106a9ce064b697e2262d71ae367de39fa90ea29
-
SSDEEP
49152:WyCYaO66gtUFB/ytPmOUtFMW2L5NygGwbLO:WyCYaOvgtUFBcmXtFMW22vKLO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b88340afd213bf5ffd0ff3f15f5f27cb_JaffaCakes118
Files
-
b88340afd213bf5ffd0ff3f15f5f27cb_JaffaCakes118.exe windows:10 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 420KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 982KB - Virtual size: 984KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 118KB - Virtual size: 118KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ