Behavioral task
behavioral1
Sample
a110df662cd1da8f3d9169ce593f3040_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
a110df662cd1da8f3d9169ce593f3040_JaffaCakes118
-
Size
682KB
-
MD5
a110df662cd1da8f3d9169ce593f3040
-
SHA1
aa998f2421e068459b861275b3b5dd54b0cf43ae
-
SHA256
4188965869992f03a96d5e9090d8e0a93f062d699aa9dda51095b6c666c5b2e4
-
SHA512
55980faa35dd9b56f59c20b0f594392edf0107478b7f18d63acc6523496a7ac6eeb8d829753ecfd0e77785b602a7e0d3270bc1d224b72a0cd914c0a8f3f2c02b
-
SSDEEP
12288:oKmobmi5U59nbWPuCVWNi8yHaC4hL60xodq38Z687C8m8zuz8zS8zBzzzh8y:oHoCi5mnbSudN1yHaCAxl848/
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a110df662cd1da8f3d9169ce593f3040_JaffaCakes118
Files
-
a110df662cd1da8f3d9169ce593f3040_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 248KB - Virtual size: 248KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 393KB - Virtual size: 396KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE