Behavioral task
behavioral1
Sample
a956bfb047bd33248cc57c9512ada667_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
a956bfb047bd33248cc57c9512ada667_JaffaCakes118
-
Size
2.1MB
-
MD5
a956bfb047bd33248cc57c9512ada667
-
SHA1
24a4be7d980c3bccff463560b131d77a6819fec3
-
SHA256
5b256a63dbffef0101c6e8f25b3a71117f161dee466ab9b526ea505dc5686406
-
SHA512
473f1c0406314ef506792f4719f955b353349d29d6a00796c1c080ebd1f6a1152768a3f6222238b72f87c81c7d9cb6fde8d2efa01ae52f74604992b29bf60d37
-
SSDEEP
49152:EGm+Vv05PZ7nk0Vds4SbFD4/Yv22UZKe0H0:EGa5x7rtGy/dlvw0
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a956bfb047bd33248cc57c9512ada667_JaffaCakes118
Files
-
a956bfb047bd33248cc57c9512ada667_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 596KB - Virtual size: 596KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 292KB - Virtual size: 292KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE