Behavioral task
behavioral1
Sample
1256ab5a053620fd46018ad509771ac8_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
1256ab5a053620fd46018ad509771ac8_JaffaCakes118
-
Size
32KB
-
MD5
1256ab5a053620fd46018ad509771ac8
-
SHA1
b6e9a2fc955baa0f2182b2874b70ab49894b8ff3
-
SHA256
ac93afac94768221c73c2fb3631f19ccb165da17fc4db7f6cd383416e4c3eb7b
-
SHA512
1818f59755278224a092f4b0d2ebaec04528a62e04164d227700f592045d853bf4a4a49e4f1445a3bcbbbdb1bcc983bc8e95f19bef521f4b66eab94f014d40d2
-
SSDEEP
384:3JxJhEsVnFkjKahLUPTLR4OZgthnI5fFHxcTW01g9R1rc8NJOixylCv/tWW9rQ+y:39fah8mPI56s9R1rHNcJAX9rG
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1256ab5a053620fd46018ad509771ac8_JaffaCakes118
Files
-
1256ab5a053620fd46018ad509771ac8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 52KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE