Behavioral task
behavioral1
Sample
057c578264767fea990180d764fdb505_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
057c578264767fea990180d764fdb505_JaffaCakes118
-
Size
253KB
-
MD5
057c578264767fea990180d764fdb505
-
SHA1
431524d78d97834bda4500f920a7e77886ca2d30
-
SHA256
0ed5c60d806c46e1173935b346702923a4d77101ad86ab521a421f004925edcb
-
SHA512
954cfd4d0f230cb63d23344b1fc7d6532262c26602b113c1205da2b60b96cdcbe4011aef837434511214d9da2cb687030e2bd03ba582b75c7b78e2217577832a
-
SSDEEP
6144:fWPo/6+qmYRp0icPwAvOTSLEsYva8TRuboIuXndzJ:fwoViH0icPwekSIscT8b2
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 057c578264767fea990180d764fdb505_JaffaCakes118
Files
-
057c578264767fea990180d764fdb505_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 440KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 244KB - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE