Behavioral task
behavioral1
Sample
a5277a321e19435644f4676fb1803ec2_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
a5277a321e19435644f4676fb1803ec2_JaffaCakes118
-
Size
150KB
-
MD5
a5277a321e19435644f4676fb1803ec2
-
SHA1
35f104a1657961defd31bbad16bb40641204c604
-
SHA256
9b307e2f9e065e84daa0f7f8c78a443d810209a71c145d0a2cd77bb7ef6b7b51
-
SHA512
94e8876ab73955b911efdc5f009b1f533f6661483a858bdd0458960e25b6a3685f3b026d929a16e628d78ec0568155c208d3d1f621ca42242163aca73796d5a0
-
SSDEEP
1536:EDCu9DxTCSNKka1OdWGVXKQZ9KOplCKFQsARH2Qfl+aJ7rFa+jF8d75W01DUkG5h:EDCuZBq4kQZbXQRH2mlj7ud7s01D2L6
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a5277a321e19435644f4676fb1803ec2_JaffaCakes118
Files
-
a5277a321e19435644f4676fb1803ec2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE