Behavioral task
behavioral1
Sample
33557fb863446f74181692185d74aaae_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
33557fb863446f74181692185d74aaae_JaffaCakes118
-
Size
784KB
-
MD5
33557fb863446f74181692185d74aaae
-
SHA1
8bed10e1b14414c9f52345ca276827ef7771c274
-
SHA256
5354e910a26258b717d15069b54e11702c29b6b22b68f925eb6326071ba76e9b
-
SHA512
e9aaae567f5189ec056bac0ca6e6484e4bb1738abbbc1fe8e76504c30d09057b7182844049d65b5cd3bcbff6846a55134ea4195613cd098feaaaacf15e1a238c
-
SSDEEP
24576:pQDyI/wss8kEGu6ByrV1i7w0XSWL/OYjyAb8W8y:PIYss8kvEAcIVLGVS8WR
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 33557fb863446f74181692185d74aaae_JaffaCakes118
Files
-
33557fb863446f74181692185d74aaae_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE