Behavioral task
behavioral1
Sample
54be62cf4027c53c238096d19fdff957_JaffaCakes118.exe
Resource
win7-20241010-en
General
-
Target
54be62cf4027c53c238096d19fdff957_JaffaCakes118
-
Size
272KB
-
MD5
54be62cf4027c53c238096d19fdff957
-
SHA1
3d81083bb75681b81823430aa487f2664bc3be0d
-
SHA256
bcdd4a67ec09aeb29ac5f150027db1d152676b40b9231c333ebf37012b925750
-
SHA512
d9927dab6cfa8f2501fe2e36187190614876ad906a00ba56495d4692e8d09950c3be00f66795ecc54f48b69d8358f1f687b66b277c2787468961375b0b393a0c
-
SSDEEP
6144:Mk4qmr73P0MqUgOtiehS+jWr4vbdG/08yG2UIz:/9gPq7jajkUtUI
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 54be62cf4027c53c238096d19fdff957_JaffaCakes118
Files
-
54be62cf4027c53c238096d19fdff957_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 60KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 270KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE