Behavioral task
behavioral1
Sample
a44cb2a1f14e7a98ced266644a1f371a_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
a44cb2a1f14e7a98ced266644a1f371a_JaffaCakes118
-
Size
1.7MB
-
MD5
a44cb2a1f14e7a98ced266644a1f371a
-
SHA1
83d50e77c38ca1094bb43ed22f2a1af52700f412
-
SHA256
91d6d9f65479f428d97d6e06a412c0569657dc552a0e20c8ca0e75d204cb1075
-
SHA512
2ebe75c373ecf50546494c348cc08269c1dac748180fe0c72570637c10a113c4be980a3e5882b37b464398c9b0e89a7eb34ab30bf1c5f11c404730b5320b712f
-
SSDEEP
24576:WJFh7elYyy3RFacYqytJukxgJ1KFGzDv+pBmb8DR:WHklaRRhytJuPVXWbF
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a44cb2a1f14e7a98ced266644a1f371a_JaffaCakes118
Files
-
a44cb2a1f14e7a98ced266644a1f371a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 383KB - Virtual size: 384KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE