Behavioral task
behavioral1
Sample
169ccd877880ce0a5a4a4dc9e28eba33_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
169ccd877880ce0a5a4a4dc9e28eba33_JaffaCakes118
-
Size
202KB
-
MD5
169ccd877880ce0a5a4a4dc9e28eba33
-
SHA1
53e738506e4cd28e357b6c529d69734025a35628
-
SHA256
f13d22b23b930954489819e50e3f2d2b63a36603e83879b725e0c531a57183dd
-
SHA512
f283ab5deeb00b791c2c481bef7a546707ed06ed94914694284e448d50ef43e4cdb3dd95a0ef0cf0bb1e0c6d982547650ee00e7ea1a47f5880b0a614a4931fb7
-
SSDEEP
3072:+1+MJKrUnFYY5z1i0Nmbi5fJBNmmDbSeoutOf9ke+:GIrPj0NmWtNNDb1oSOqe+
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 169ccd877880ce0a5a4a4dc9e28eba33_JaffaCakes118
Files
-
169ccd877880ce0a5a4a4dc9e28eba33_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 292KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 107KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 94KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE