Behavioral task
behavioral1
Sample
a55d2010face23388580183d9ee35e1e_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
a55d2010face23388580183d9ee35e1e_JaffaCakes118
-
Size
730KB
-
MD5
a55d2010face23388580183d9ee35e1e
-
SHA1
7d96878698f3966e4c0e569dd85c314ada43963f
-
SHA256
45998bc1fdf8b9507fe68d2a9486155d3448ccf60a0c44ab3e037cc216ae837c
-
SHA512
05d770d6fb9bd8dc0e6c6f5db48476fdc7943f14498b46c16078eb6b036e8bf4e3a488d397da8baa8393c2f6088229a12fccd584ce99ec2e44eccc53d070c1e3
-
SSDEEP
12288:bIrJ4xJE5uQPOPtSHOWUhFSSAeqVSdw3t+LvobY4ynsTooS:SyQ5WsUp9qVRt+LywsT
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a55d2010face23388580183d9ee35e1e_JaffaCakes118
Files
-
a55d2010face23388580183d9ee35e1e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 464KB - Virtual size: 464KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 260KB - Virtual size: 260KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE