Behavioral task
behavioral1
Sample
43a2ece96aa9ac1cf2228ad0b2bc0697_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
43a2ece96aa9ac1cf2228ad0b2bc0697_JaffaCakes118
-
Size
4.7MB
-
MD5
43a2ece96aa9ac1cf2228ad0b2bc0697
-
SHA1
ea9cdbdbf3ca46b92d10db730a03aa64ab3e81d6
-
SHA256
d59f42140057cf86a23701169b75e40717e2353591f05411fd650aa83687d885
-
SHA512
6690f001fa71b2f028495506e9b6c02b6aacc70ab31ed41209f10775cbf24debe0a338bed4b567d277006ac9fe6fc22c69d09e2cbb40b388b460b40de5bcdf27
-
SSDEEP
98304:FkBgrxEvbBOhKZNKXPgIy9juZsNdFo/lRVke56cbbpULLS4:FkPvbFZoXPAduA3o9RVX56qbmC4
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 43a2ece96aa9ac1cf2228ad0b2bc0697_JaffaCakes118
Files
-
43a2ece96aa9ac1cf2228ad0b2bc0697_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 9.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4.2MB - Virtual size: 4.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 505KB - Virtual size: 508KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE