Behavioral task
behavioral1
Sample
ff2ab93fa689a684ed568632e7346519_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
ff2ab93fa689a684ed568632e7346519_JaffaCakes118
-
Size
171KB
-
MD5
ff2ab93fa689a684ed568632e7346519
-
SHA1
5c45e37c52e8855d68c7f27fb49bfb50322deda4
-
SHA256
0bd34a3f14afae0cd29f783772f956f3245493cf7783d4a53e02f081d00b416c
-
SHA512
eb6f90b783d87b4ab655c764ecb5e7bdff96d19f4597902ec0b61f31d008546ca74210b8227cd8e51fad3f89a11cd649b5a0f8c471cc4441b1281b8aee985a1d
-
SSDEEP
768:f19qYnENpsfQ+aDqAw+t6+uD1WA8u2qDONeo7IiGGjL0njcL6kjiMtmi+H+XfllK:N9qYnEuQ+an6Wb3oGjL0njHia1VkG
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ff2ab93fa689a684ed568632e7346519_JaffaCakes118
Files
-
ff2ab93fa689a684ed568632e7346519_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 128KB - Virtual size: 128KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 39KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE