Behavioral task
behavioral1
Sample
4a055df59995557c71e58ce157716450_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
4a055df59995557c71e58ce157716450_JaffaCakes118
-
Size
784KB
-
MD5
4a055df59995557c71e58ce157716450
-
SHA1
3801abf3e3cc70e4015f904afaed05d89816baea
-
SHA256
ac2cd9bd99af43d763c896eda4ba8f7555586548def9de66ebb610e3d4d4f0f1
-
SHA512
5514f3ee2ec8ecd259b466d54cdb95d37e5fca4565a1335ec363ffd62ecc9e531deb636af1ad5542de19793ed35e9d7e42112b9cf8ecd48692dca34a46a50c09
-
SSDEEP
12288:vbsRQ8/vm5/tGfoco8slsIsMdRlcr+i69rz0/KPbM4i8+DmfiQ+64Ni8iWNaVnOM:QRlmLGdisCri6l00IDmfKniWunGh
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4a055df59995557c71e58ce157716450_JaffaCakes118
Files
-
4a055df59995557c71e58ce157716450_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE