Behavioral task
behavioral1
Sample
ad275e36922700010b27c0b8a9a950e6_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
ad275e36922700010b27c0b8a9a950e6_JaffaCakes118
-
Size
257KB
-
MD5
ad275e36922700010b27c0b8a9a950e6
-
SHA1
335d44f8c933c187c54b096149e802d3731ac0f8
-
SHA256
1dea91f67ecd5077c14df87e37c193242e1f74354c3a4ecbe65ec830cf59e248
-
SHA512
2cc0109fb3382795758ee11a97ab1ea504fd26f7016896f2e5c4a7e38cbc2266007b061bb8d8c214b4b4e431f81617df51ce6f2f3c0aed22f5906da47543e1d4
-
SSDEEP
6144:mJjs0RyTYNKaAqbMCoyfSKT8Fs5BPryBQc9ldMCTPSx23sP:mJw0RyUKju/7fSDFOryGuldMiS1
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ad275e36922700010b27c0b8a9a950e6_JaffaCakes118
Files
-
ad275e36922700010b27c0b8a9a950e6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 420KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 250KB - Virtual size: 252KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE