Behavioral task
behavioral1
Sample
aa08233acdd4af569f2940eb0131485b_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
aa08233acdd4af569f2940eb0131485b_JaffaCakes118
-
Size
120KB
-
MD5
aa08233acdd4af569f2940eb0131485b
-
SHA1
84d7aa5877dce295b59823c301a248589de19095
-
SHA256
45bd00d755a8867090639c6e20432904ff8b816a256596d0c7cdd9c816565435
-
SHA512
6e9d8aba112a982c3c9566c5d204c290aea46fd2d5b28afc59503b94b56538697e4abe119139034e50b104e5b30c51cf3c763f2f24eba3deae85f51726dd629d
-
SSDEEP
1536:pkKjSb0xp2u61AJkPmqOQJCns3o6DR9WWHr+JAlFlGWGbDlN4/bGWIJB/mKEOc:pkPbF2JthWDRp+IbGWG+bXIJB+D5
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aa08233acdd4af569f2940eb0131485b_JaffaCakes118
Files
-
aa08233acdd4af569f2940eb0131485b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 62KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ