Behavioral task
behavioral1
Sample
af5a0aae98d006203278763767028c2f_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
af5a0aae98d006203278763767028c2f_JaffaCakes118
-
Size
123KB
-
MD5
af5a0aae98d006203278763767028c2f
-
SHA1
3a317dc2894e10c3c2bd09ceb7450ffcef6b0fd9
-
SHA256
25dfb997e65be657db13d7f78bd98227d8dfe4fc8958176b68051940e2d9a9ac
-
SHA512
6a06370350579f1422afcc0077c38b0219824c5b3869abc43c13fdebed68233c00d8e29aacc649df7e35aeedadcd0491112baa11f53858d13051dc418f81daa3
-
SSDEEP
3072:OeSQ41MZrrOwzrq5Ss9eYfphfFQkUcot3EpeBWLLxJj:OVYrJrOSsRwcpl
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource af5a0aae98d006203278763767028c2f_JaffaCakes118
Files
-
af5a0aae98d006203278763767028c2f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 107KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
42vab535 Size: 62B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
oqvrztrg Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ