General
-
Target
JaffaCakes118_b2cf51e1c87a61c093ca3953d9cd6c28
-
Size
118KB
-
MD5
b2cf51e1c87a61c093ca3953d9cd6c28
-
SHA1
28eb0775726cf06d208f6aeb9aa7ea251c995198
-
SHA256
5e825c47732b3303670166e5916586793b5c405a9de48c178219506fc58f8bc5
-
SHA512
6f0c664ed33ac2857a6c99b932923cc55716759a8f18e1beeedaa7c8f141935b89cf22085833928d2e7d4e8e36cb7f1f4a8d1cff0fa9012c742f2b2a9b765bf7
-
SSDEEP
3072:Mg+3fh/PHrgNUqOBx4J2vNbGfvGnd3gW5ZM4/uBn:l+3fRb9NdndPZMT
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_b2cf51e1c87a61c093ca3953d9cd6c28
Files
-
JaffaCakes118_b2cf51e1c87a61c093ca3953d9cd6c28.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 54KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 61KB - Virtual size: 136KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE