Behavioral task
behavioral1
Sample
119255cd5a32e5945558d698a00d9878_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
119255cd5a32e5945558d698a00d9878_JaffaCakes118
-
Size
111KB
-
MD5
119255cd5a32e5945558d698a00d9878
-
SHA1
b5c571508c5f58b07aa936cdd341b13137b532fe
-
SHA256
a5eadd96e6908f006f748987c2ad531bf08278c75eaf40b287f3b0e057314dcb
-
SHA512
18a3c3f1c95d09c6b989e9526754e9c638a23651723bebddd72752cc1deafc219b76fc1bb650c3aea66faa76c712ee64cdd3ad1f4fc0b11b3228e84765b3f5ed
-
SSDEEP
1536:yrHjpAHNd04Xyh4bPM2/av3EEC5THnhHkJ+SbgNvEKOL:gHWNlCh9L3EE4nhHabgNvEL
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 119255cd5a32e5945558d698a00d9878_JaffaCakes118
Files
-
119255cd5a32e5945558d698a00d9878_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 81KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE