Behavioral task
behavioral1
Sample
a446e63c9d8f5d95586e941d76cf8bdc_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
a446e63c9d8f5d95586e941d76cf8bdc_JaffaCakes118
-
Size
270KB
-
MD5
a446e63c9d8f5d95586e941d76cf8bdc
-
SHA1
cd0a86fb9af35bbd12ef114b1cab3be531bfec13
-
SHA256
3ab07ff1e05b9cb4a1fbbee0c4dc375c04fc11adb4c0c06b9a55cf3999098931
-
SHA512
b343a412ad4d72a5d6c56cabb169ea5f262c329fa1269691896bfe46d8b251288e22598f6b29f35be4626711c2c266a0c1ed0c74e13dc6812e84a3d63ff53ea5
-
SSDEEP
768:/Ldng9voKu6eEJ8eikSzU0szHEKrKwkTw2VmwFe6EY11+DOZRsqk2bk2HalmNcgV:O9bIczPz2VmmEY1ADOJOBgqzWgJq
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a446e63c9d8f5d95586e941d76cf8bdc_JaffaCakes118
Files
-
a446e63c9d8f5d95586e941d76cf8bdc_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 208KB - Virtual size: 208KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE