General
-
Target
0c26097973c96a1d10598196fc5f1d42_JaffaCakes118
-
Size
342KB
-
MD5
0c26097973c96a1d10598196fc5f1d42
-
SHA1
218e6301921931bbfc2328432cfc1c75934c0f8b
-
SHA256
e939fde7badba5db526708e57286762595bbfd2e021b1bbd7b7198a7e41d2367
-
SHA512
9182144018e922feff766f4835e8289fc060272771e13f88ee65f4532174c8966dccb0d89be1b7b321736218e0214775f584dca2fd3d2a087e51254d6285d4d3
-
SSDEEP
6144:8FanWcqQieYLlar/9T4eQsJaq3TmQ5sEWC7vXjKPHpImmyk9GoS0:8FabtNmlo/9s8LTmEWCTX+PHpxzkUoS0
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0c26097973c96a1d10598196fc5f1d42_JaffaCakes118
Files
-
0c26097973c96a1d10598196fc5f1d42_JaffaCakes118.exe windows:10 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 144KB - Virtual size: 144KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 192KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE