General
-
Target
e0827681255a332ca1872b05766f3f50_JaffaCakes118
-
Size
173KB
-
MD5
e0827681255a332ca1872b05766f3f50
-
SHA1
1ee1cb341bc09a6b1fc2677a09f16c5312251e44
-
SHA256
fb7afb862b7802825c2f3fff5837d86ab56c0b4ec1f6fab421f4a8a87566dbdb
-
SHA512
467473cfc9c24e67ba4ae29757e5f33efd86a72ffba923ad9f8ace6cb7133b4f6645617f7bbe3466b67ef6792ad10ad7b5075f11f27c9c9c1775332de2c00d0e
-
SSDEEP
3072:aL1UyB9QlYe5dKOy4QWpoxo4pOiXzhKDQAOmqc1n1QLpE6tj4DJSyZ:aL1Uy/Qzy4xporpOijhwOGn1cKc4X
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource e0827681255a332ca1872b05766f3f50_JaffaCakes118 unpack001/out.upx
Files
-
e0827681255a332ca1872b05766f3f50_JaffaCakes118.exe windows:10 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 276KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 170KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:10 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 163KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ