Behavioral task
behavioral1
Sample
893d0a4c30d5a6a36ff5349c862b275b_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
893d0a4c30d5a6a36ff5349c862b275b_JaffaCakes118
-
Size
499KB
-
MD5
893d0a4c30d5a6a36ff5349c862b275b
-
SHA1
aa2cb02ab12773deb1bb2bdb4558425082311456
-
SHA256
e82628458cd95720ea798cc68ef20c1cb760c33248c6a10a37528bc924a5de08
-
SHA512
b4af5479a3c578f9de21314ccaf52c074f9effe6eded611cd84d6d678b66283886c8fe861100ebefcfcbdd2ca59b562405fc51035fe785f124057d11d48dee71
-
SSDEEP
6144:vNM7Wt6+qhagy0a5alG+dgWcI2o3X+dKVjQiyEQYfiALE3G0kypsH8uSE:vC7IfOagyJaloWeTPkypsH8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 893d0a4c30d5a6a36ff5349c862b275b_JaffaCakes118
Files
-
893d0a4c30d5a6a36ff5349c862b275b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 268KB - Virtual size: 268KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 176KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 53KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE