Behavioral task
behavioral1
Sample
aa35ac027e4c5f8d63b9ecc67902cb0c_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
aa35ac027e4c5f8d63b9ecc67902cb0c_JaffaCakes118
-
Size
55KB
-
MD5
aa35ac027e4c5f8d63b9ecc67902cb0c
-
SHA1
69562c63c2dcc0758483dd513bd4fbb5f3af40c0
-
SHA256
68eb7cf56cf635eb4a2ded82e8659a62182402b6f65e7f016472d43200cb3266
-
SHA512
fd312f5eef6950896673a1230755dee444fc2f97e8f8bc2f0b6449fa6b1d4779e0d45a3ece3c3b3387bcf02486f448dce074f64962f79519d3c84727cd9f9b33
-
SSDEEP
384:bVuTMyNQLaG+xY7yV8XpEGD042kCKKMj34vNPZHTm7rQ0vUN5Yw:bDdLaGL7ym5v04KK/jeNxHy7E0vI
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aa35ac027e4c5f8d63b9ecc67902cb0c_JaffaCakes118
Files
-
aa35ac027e4c5f8d63b9ecc67902cb0c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.WYCao Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ