General
-
Target
2bcec5fdd650e8e4fe52e3aa7d520d65_JaffaCakes118
-
Size
192KB
-
MD5
2bcec5fdd650e8e4fe52e3aa7d520d65
-
SHA1
921da720283560b8c31fea7dbc7b7b82b5a4091b
-
SHA256
47c13145f3d2e95af7ca63c04bccbc5d1df4c33a2f22793150a4d87b3639db14
-
SHA512
7ad51027c2a7d459d83b1ca6b394e283e88b7fa6e10dce8f57112f8f002bea9f22e1f251a3b59792920447a7fc978614016989f94a52d1a543729aaa0047d1c1
-
SSDEEP
3072:X+ZgUAs2luSVecB6Zi4PgaLA7GwQN57ds4/e+CbvZJE2TYWlEWoNrDYPb9mdcFE7:wgXs2gMB6ZDPM3QN55sOe1bvZ22TYaCn
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2bcec5fdd650e8e4fe52e3aa7d520d65_JaffaCakes118
Files
-
2bcec5fdd650e8e4fe52e3aa7d520d65_JaffaCakes118.exe windows:10 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 144KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 187KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE