Behavioral task
behavioral1
Sample
1577d4852be19f903b96032ead685409_JaffaCakes118.exe
Resource
win7-20240215-en
General
-
Target
1577d4852be19f903b96032ead685409_JaffaCakes118
-
Size
1.6MB
-
MD5
1577d4852be19f903b96032ead685409
-
SHA1
5bf7f781422c12256e0ccdb32e47d4684150c872
-
SHA256
4b9029e664a3a2767810b2c493655911bc4e341a5364f2993f6c69f3698d78a0
-
SHA512
5b683e6efb283569bff5b705b121998659c390778907f84f1a0db49cb47b50394de261854fbec7b4ed19fecc57a1fe3be5f92376a37ebb01fafd304de1f85d64
-
SSDEEP
49152:TqT8D8A6qLYIGjZC/7p7wyju+ktO8ZM3bL5gU9R+vs8H:T7t6qUq7p75jew8ZEbL5gUP+U8H
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1577d4852be19f903b96032ead685409_JaffaCakes118
Files
-
1577d4852be19f903b96032ead685409_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 296KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�}^�u Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE