Behavioral task
behavioral1
Sample
a67e95b93406a6659bbd5a46515895fb_JaffaCakes118.exe
Resource
win7-20240508-en
General
-
Target
a67e95b93406a6659bbd5a46515895fb_JaffaCakes118
-
Size
7.1MB
-
MD5
a67e95b93406a6659bbd5a46515895fb
-
SHA1
ebd2f39e1a9a0b53b7d3abae0b3d42df85770cea
-
SHA256
2890d0bbcd1c9120100d74030d138a364dccb9642f9fdcc746f9dd2d0de8d43c
-
SHA512
59d078d08893ffcfca8dd9637dfdc6d9e0b83dd0be6e34cf5537ec7af2942f4f97452be333a4f6c5515f8538260bfc9b86342785b0beb41104b6969ba7deef08
-
SSDEEP
196608:Me6P9aFJFoPveiLSEVXSa+V6WlTUXHjWr:Me6PsFJF07LSE19+V65XDWr
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a67e95b93406a6659bbd5a46515895fb_JaffaCakes118
Files
-
a67e95b93406a6659bbd5a46515895fb_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 12.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 6.6MB - Virtual size: 6.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 513KB - Virtual size: 516KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE