Behavioral task
behavioral1
Sample
aea659e1c668ae59d002365255955465_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
aea659e1c668ae59d002365255955465_JaffaCakes118
-
Size
491KB
-
MD5
aea659e1c668ae59d002365255955465
-
SHA1
aea2e39537b6510e16881d097e5f0e4c833182f9
-
SHA256
92f51c34b004b21a9298bae335d1ec804e8ae4a15d32afde4a0a6515511e4c62
-
SHA512
6629b7d721a1118bbef7013dd3296f1caa5778a3cd197d2f1113b8e2ddfd628aa5b32d1ab88883cc7b1d94bac625fee1d6cefa9aaa2771fbd2ea2e3a6080e1ba
-
SSDEEP
12288:pbjJJfpepfhk9mcBxYaoLbVmpSh1uqocgqJQhAmVWkBBjXpEv6w5LrkAU+:pb9vGxU
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aea659e1c668ae59d002365255955465_JaffaCakes118
Files
-
aea659e1c668ae59d002365255955465_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 256KB - Virtual size: 256KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 180KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 53KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE