Behavioral task
behavioral1
Sample
55e0618582a0f3f4dc39108262eff72e_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
55e0618582a0f3f4dc39108262eff72e_JaffaCakes118
-
Size
149KB
-
MD5
55e0618582a0f3f4dc39108262eff72e
-
SHA1
2f09add501902df60192dcca3364ded7ca921670
-
SHA256
a1b8da059be104767da548db970dedfb2e3d7b4c8e6bf39f3338b3d4c246a6ea
-
SHA512
0347ed4822765568f1725bae636e55519bcb3e020c60652616e98d0f64c6218cbcf375a212864fe124658ab444f2d53de550cd1973dec8294359adcb8ac1cd2a
-
SSDEEP
3072:e4N0LwH/hUmnWac5jglEWWqDHwf1O4oSZdIW/8o/etB2oAmR/A/k:e4NxPopWWqLo9oSZw8C/AM
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 55e0618582a0f3f4dc39108262eff72e_JaffaCakes118
Files
-
55e0618582a0f3f4dc39108262eff72e_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 204KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 97KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE