Behavioral task
behavioral1
Sample
1535aa03ada0c76ca36efe064d242ee4_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
1535aa03ada0c76ca36efe064d242ee4_JaffaCakes118
-
Size
7KB
-
MD5
1535aa03ada0c76ca36efe064d242ee4
-
SHA1
1e545076f717fcec3bbb9057378fb912c5e7496d
-
SHA256
2e33adb5362065bfcef058cfe6578bede9fffbb80b4a5b1fcd123033bd82b89f
-
SHA512
71738f692e5f62e5280c1253da1ad10b74be7ae38f85f3608b9e518fe6235d6a7d15dcb39547637053368e89c80a53a6e8bf0c1b3f1f6a035eae8e174e1e4e16
-
SSDEEP
96:+HBDUUaR8Wvo70Y1YBbistlctkZxYIGEWxO8uWNhl7KmM5Cy+P5ANeSG2oZ:UBIUaRxw7RMbiztmaENiNLMB+P5TP
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1535aa03ada0c76ca36efe064d242ee4_JaffaCakes118
Files
-
1535aa03ada0c76ca36efe064d242ee4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE