Behavioral task
behavioral1
Sample
56ebad2f6f24d0af10512c99625f9a1a_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
56ebad2f6f24d0af10512c99625f9a1a_JaffaCakes118
-
Size
340KB
-
MD5
56ebad2f6f24d0af10512c99625f9a1a
-
SHA1
3275122c7c8643076875314848e2da5ba276d252
-
SHA256
d17e325c621856b673e907d513d72b094ac5c6520375f0273368b6bc854de9a9
-
SHA512
0a5382d818a7fe32454cf3104a7519495413aac16dbfd07d28fedc85a96f213d798e653ff1671c797bcdbc738c13f7afbda2c7b682b9ee8dab12515f3ba3be3f
-
SSDEEP
6144:u/SirzR/eGgxGLf1mPrzCsI7vqvxvXvKvLv8vtvHv3vyvxvyvEvPv6v4vis2:oR/XQ0WXF
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 56ebad2f6f24d0af10512c99625f9a1a_JaffaCakes118
Files
-
56ebad2f6f24d0af10512c99625f9a1a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 240KB - Virtual size: 240KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 74KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE