General
-
Target
d03cfa79425a525502a239d27ee36468_JaffaCakes118
-
Size
126KB
-
MD5
d03cfa79425a525502a239d27ee36468
-
SHA1
82102fe5926928ef803e46c497bf1f8960dede3a
-
SHA256
a88e49090e5bff5bdfeb9b933feabe892a57d6c941e35a9af5e8ae781b0f212e
-
SHA512
24cdb552a9c551fc450c7716a516191af76f03d45e5f9142298c511bf2d3589d6341f49094b966cf5f10ee04478834d404dcf08ccab4ef361829bc7af5b8ad9c
-
SSDEEP
3072:BOezsPBXaeEVzwlXqAUI+JFdO67EBNZMQvLxv8PPSa7+D2YZW/P:B1RVoXqbIUJoBNJvF8PKaAhc
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d03cfa79425a525502a239d27ee36468_JaffaCakes118
Files
-
d03cfa79425a525502a239d27ee36468_JaffaCakes118.exe windows:10 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 160KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 123KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xdata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE