Behavioral task
behavioral1
Sample
a482f6879c8e38940e22ab4a389c5648_JaffaCakes118.exe
Resource
win7-20240508-en
General
-
Target
a482f6879c8e38940e22ab4a389c5648_JaffaCakes118
-
Size
6.6MB
-
MD5
a482f6879c8e38940e22ab4a389c5648
-
SHA1
fbf62d4440d04b608dfe4b33cc6ec7b6ce76ea45
-
SHA256
4a4b3fd3aa8fc878fd855b755b30ce259d3e134e61949522a8b602151569bfc5
-
SHA512
5334265acaaadcdac9a3cfe6d3677c161c346ace0bda6b0da491c03f36db1b97a739072a36895a7355bc622a0318317d8e7afe6f0cf7d57175b4e87a82d327bb
-
SSDEEP
196608:WpGu/lIOltK5wslSljZ5BArz5LltH04w1XHXrl+9a97:Vu/lXkwSSld505Lcz1XHXh+Y97
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a482f6879c8e38940e22ab4a389c5648_JaffaCakes118
Files
-
a482f6879c8e38940e22ab4a389c5648_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 10.8MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 6.1MB - Virtual size: 6.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 511KB - Virtual size: 512KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE