Behavioral task
behavioral1
Sample
641dcf3557177768e19ed73a8788338e_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
641dcf3557177768e19ed73a8788338e_JaffaCakes118
-
Size
6.2MB
-
MD5
641dcf3557177768e19ed73a8788338e
-
SHA1
c69a0c9197a25d507f3ed8106a4404aa5fdcc76a
-
SHA256
51e6d79bc7319fe13128e8490fbec9512d91974525ad17dcb2ba81ea45e17bb6
-
SHA512
a1d196f8047a2018d2ffdb9e8bd773338972b1acc0859bd834ee5766b3f4825a02273ed5dad4aa2ad241664d35ca34247f5c65e38a2e6db62314d5dbcada35fe
-
SSDEEP
98304:vM2bIXaxauN7F+ZduNx4Ikl9ZgH6oCrZD6LfYCdl5zDvFCaoFPzFL:tIX1SIGnklEXCFJgzgaoJh
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 641dcf3557177768e19ed73a8788338e_JaffaCakes118
Files
-
641dcf3557177768e19ed73a8788338e_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 10.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 5.7MB - Virtual size: 5.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 508KB - Virtual size: 512KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE