General
-
Target
c89275eda25e6fe9e236360c88f603a7_JaffaCakes118
-
Size
2.2MB
-
MD5
c89275eda25e6fe9e236360c88f603a7
-
SHA1
a04a6d98c890bf7658eeb3a23b4770ef1b92a55e
-
SHA256
fb36eca1dc9085194c5758e3de3f46c74e3ed9b50fc1a648dc5c38dba9bd15a3
-
SHA512
db32f2b4f7a2834188883872152ddea47ad3fb3c04a55c41ff7215027bd58983c7135e490b73034001b988be419a56e67f1dca14eaf98ed685058f56a31430f9
-
SSDEEP
49152:xPZT2P1CTw/C0Zm1hcplDBBKUTij+dd3kSGQD:xPx2Pj/bZUcpjcwefLC
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c89275eda25e6fe9e236360c88f603a7_JaffaCakes118
Files
-
c89275eda25e6fe9e236360c88f603a7_JaffaCakes118.exe windows:10 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 424KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 963KB - Virtual size: 964KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 282KB - Virtual size: 282KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ