General
-
Target
JaffaCakes118_4577ef462e6eda8a9fa1a5767f0195c0
-
Size
111KB
-
MD5
4577ef462e6eda8a9fa1a5767f0195c0
-
SHA1
7de54bab588e073e6282c08076c5d91afabe6d05
-
SHA256
fd0f07b0acaf8cbe4cc13e0489a35f44004d544a68bc9368a09b44f1ad3fbf37
-
SHA512
ccf4dc25e96e3f5162e0a69b074a493a92c224df1c001ebd9be8088015ba10cd33e7d102a6f087ff058a4d08b741e625259d1e562c373235e35548c4eb4ff04e
-
SSDEEP
3072:TROzoTq0+RO7IwnYWFcFFFFFFFFFK2FFFFAFFFFFFFFFFFFFFFFFFGNiiP8dJD1X:1kdNwBKii0dJ8fr
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_4577ef462e6eda8a9fa1a5767f0195c0
Files
-
JaffaCakes118_4577ef462e6eda8a9fa1a5767f0195c0.exe windows:10 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 120KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 52KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rmnet Size: 56KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE