Behavioral task
behavioral1
Sample
53aa9cbff208c585b081cb2298cf005a_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
53aa9cbff208c585b081cb2298cf005a_JaffaCakes118
-
Size
241KB
-
MD5
53aa9cbff208c585b081cb2298cf005a
-
SHA1
29497b36cf932e2456270485704f5de98daa5f40
-
SHA256
9ebe6949e1f8ebb696837027baf61388e77dceee524ecab2e7eef193e709a1bb
-
SHA512
292e791ad19148694bd0e6f257a8bd004bca32d6c42871cf802e42ca73f06aa594b7aca101af1066b4e61b257dfd0acfbc3a769cce776d6e50477a3cbfa1f550
-
SSDEEP
3072:l3RPtXQpS1N7joen7aliFZEB3xIDijJONmei6hSRq+HYkDQJYkLQIQnQV4Be40Pa:vukvfiSm3xIKJOo5YrtYQVGaeoyMK
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
53aa9cbff208c585b081cb2298cf005a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Code Sign
77:27:be:2c:77:fb:e0:3d:35:d8:96:dd:b1:8a:57:39:9a:c0:09:fcSigner
Actual PE Digest77:27:be:2c:77:fb:e0:3d:35:d8:96:dd:b1:8a:57:39:9a:c0:09:fcDigest Algorithmsha1PE Digest MatchesfalseHeaders
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 516KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 216KB - Virtual size: 220KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE