Behavioral task
behavioral1
Sample
ab601734304ba6f18959bc5df833e6e4_JaffaCakes118.exe
Resource
win7-20231129-en
General
-
Target
ab601734304ba6f18959bc5df833e6e4_JaffaCakes118
-
Size
4.7MB
-
MD5
ab601734304ba6f18959bc5df833e6e4
-
SHA1
9020022533228d55ea8424ed172f0d3f2089aab5
-
SHA256
2bda12340de2407705c9abf368145e6a06a7af675cc246203ca8f0e2edcf1dc8
-
SHA512
6908bfa494877f4d1aef10b16ebe1f92046650ad5d8c9afc94670faa76114049df03a9fb049f3c0ddf96a8e4c46c3bdebeee21bc10cd8d15de1aa489555c53cc
-
SSDEEP
98304:Tl88udp4A2evUNGnVuUwGLVWy0/OQmjmUah6rpHDg:yzDiNyiXfGDvC
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ab601734304ba6f18959bc5df833e6e4_JaffaCakes118
Files
-
ab601734304ba6f18959bc5df833e6e4_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 9.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4.1MB - Virtual size: 4.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 511KB - Virtual size: 512KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE