Behavioral task
behavioral1
Sample
55d80c2680b48225be95f15792eb9998_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
55d80c2680b48225be95f15792eb9998_JaffaCakes118
-
Size
133KB
-
MD5
55d80c2680b48225be95f15792eb9998
-
SHA1
0d3c556c622064f86e9f7184ef0479be7634495e
-
SHA256
431f166dfd43b99e44bda7f7fa3b44bb04b8b1569b3cc3bfa81af35380942ec5
-
SHA512
dfb9fe57254601acc96e0bdb83cace300fe45eb19cdbe48881cd770d4029108d2a2f833259150dd2d7ea94e44de63f7d0a67ef8c7e683a80f7846b3b90ca06c2
-
SSDEEP
3072:TWfeaem6XC3I1cMN87TA2hNHrr1ld/O7tOVS5nWbTgEkgH4cTAAYGpO6fQ:T/aeDtcUpKldCEdZ4c0oxfQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 55d80c2680b48225be95f15792eb9998_JaffaCakes118
Files
-
55d80c2680b48225be95f15792eb9998_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE