Behavioral task
behavioral1
Sample
00a4eeecc1a0aa47624e44fe9f0ce6d2_JaffaCakes118.exe
Resource
win7-20240215-en
General
-
Target
00a4eeecc1a0aa47624e44fe9f0ce6d2_JaffaCakes118
-
Size
784KB
-
MD5
00a4eeecc1a0aa47624e44fe9f0ce6d2
-
SHA1
53d0ee986cfc90c2d6c8633c7edfc446281ace54
-
SHA256
f487af61ec2ee27afc6da88f58657f9bfafcbc40dbd8be66cc3741dfb9dd5126
-
SHA512
fcbad381c985c184405f90aed5eb3518b2464186c3c50e4bb9ccb7052a06576bfdd2a02db703aabe03f8652ae34d47ed1221b03c43040797a4346a4910037400
-
SSDEEP
24576:uQR3Wzhzy2cCH2W3hrI4DsRrDaVNCbDnuBN7/FJm:t9qA2cCH2h4S3aWbDnuH5I
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 00a4eeecc1a0aa47624e44fe9f0ce6d2_JaffaCakes118
Files
-
00a4eeecc1a0aa47624e44fe9f0ce6d2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE