Behavioral task
behavioral1
Sample
056265f96789b0b485094319e1864c34_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
056265f96789b0b485094319e1864c34_JaffaCakes118
-
Size
216KB
-
MD5
056265f96789b0b485094319e1864c34
-
SHA1
69c26187d64adb273bec63bc88a43d2061cccd32
-
SHA256
04bca60e5ba5e035238e915e23c0e99cdf17c87c438cdc8378a78c3559095b0e
-
SHA512
0b6a83c9d4f78ae6a9d8603b9f2b7270ca62e70b3adde3ca50fb1aabda182b4a22bd4879b6df00e63eea96723f372efacd2d3c02e49af16b38255ad594fc01ac
-
SSDEEP
96:GkPrtbwnvB4KJISPXIZgDiB+1oLSLu+xh8k/sILLIwh3BnvB:GSBwnvBdf/IuDiAmLau+xiSfLL/hxv
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 056265f96789b0b485094319e1864c34_JaffaCakes118
Files
-
056265f96789b0b485094319e1864c34_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 212KB - Virtual size: 212KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE