Behavioral task
behavioral1
Sample
a569de13363974e4d3cb1460f18c6fae_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
a569de13363974e4d3cb1460f18c6fae_JaffaCakes118
-
Size
312KB
-
MD5
a569de13363974e4d3cb1460f18c6fae
-
SHA1
f61d1ea37aa10788989c735ffb350f5cd97f41b9
-
SHA256
c3e4d292626ed8939df1f9666f7ead3d91482f515fc171ca76f0688455cce8ba
-
SHA512
896fc1014e2640223ced8a72272b6c17cbde1f2d759890619f27b3048ee941700beb56abd8d32e2766e3e533937560e132c5badc3c054e1521ff5e0afcd7ac22
-
SSDEEP
6144:WUeIE2IIa5bJ1naEbEvY88umvk46zjH1xD84gIibrnd0JaoFFo061KE8ON:WUeIE2IIa5bJ1nXRuWkbVinTmFo0Gd
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a569de13363974e4d3cb1460f18c6fae_JaffaCakes118
Files
-
a569de13363974e4d3cb1460f18c6fae_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 1KB - Virtual size: 532KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: - Virtual size: 304KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.shoooo Size: 309KB - Virtual size: 312KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
XSDFS. Size: 71B - Virtual size: 71B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xiaohui Size: 32B - Virtual size: 32B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ