Behavioral task
behavioral1
Sample
559b593ef3a2798682056555374e463f_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
559b593ef3a2798682056555374e463f_JaffaCakes118
-
Size
352KB
-
MD5
559b593ef3a2798682056555374e463f
-
SHA1
c621163580f708737d7b69f72e7847b6d44eb87d
-
SHA256
a28a3bfd8926f184aae3c500857245335ff5bbe887196de9645c79cca319c914
-
SHA512
231d8a9989a5702e1527abebd416e5268da8994dd0333e4da0ec9c101577abe7e6f63c8e221a88e831f2a091ffae3744fedada7379501ba58a86ec406b5c1c3e
-
SSDEEP
6144:I8yZw0EMTNHw7Ip+rKUEqpjyfe03qJf1zw4T/+8zXTfwcDKl+oSU8:RZ0btw6+rK5qkfe03j4j+cD4choSB
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 559b593ef3a2798682056555374e463f_JaffaCakes118
Files
-
559b593ef3a2798682056555374e463f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 708KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 324KB - Virtual size: 328KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE