Behavioral task
behavioral1
Sample
55d5781d82e845c5770bc51608895ace_JaffaCakes118.exe
Resource
win7-20241010-en
General
-
Target
55d5781d82e845c5770bc51608895ace_JaffaCakes118
-
Size
133KB
-
MD5
55d5781d82e845c5770bc51608895ace
-
SHA1
54bfa288338ab8715ec646958ae2f61739220c81
-
SHA256
467fe74e5fe1e73e747fe2825c0fe788e17cb3c9cf29b7e4541ee0598527d129
-
SHA512
4a503d78e1fe2f94e38fc4b78a853ef4da7b4d3d33402aa310a6c5b0528bc89205669445c629e4158a26a91d56068db1148dc07f4383af9905fac292038329ca
-
SSDEEP
3072:vcM5SlSvx2Lo0BFcp5U0hmgo3GUs0XQA7G0N+3nE4Cu787f7oW1MYaS4FOkQ:vSQko0Bj0JUs0AeT+04Cm87r6YaS4nQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 55d5781d82e845c5770bc51608895ace_JaffaCakes118
Files
-
55d5781d82e845c5770bc51608895ace_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE