Behavioral task
behavioral1
Sample
a48f838e18ff54b4386ce09b8aa50bbf_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
a48f838e18ff54b4386ce09b8aa50bbf_JaffaCakes118
-
Size
363KB
-
MD5
a48f838e18ff54b4386ce09b8aa50bbf
-
SHA1
84ab465943dac42eb48f35c928a162c289f5463f
-
SHA256
84b98232748ea30b1361ec807b4951f31ae2362d7900cb127e1d482506aa6281
-
SHA512
d2396771798c87a0e7ed5fd86922f6a63ef81ed4f8ab92d46b260f153782664df3fe65e862364b8b41a680fc20e746b7f2ba01c3f485b13064222148470ddcd5
-
SSDEEP
6144:HUK7SL0L8v3B0m7+RAqsxGYgdzDRcftHcLFNWn26FEzD8rQyQpTKR9yR4oRFI7dg:0K7SgLo5kAqsKDRcfGLF+26WsQpWR9yb
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a48f838e18ff54b4386ce09b8aa50bbf_JaffaCakes118
Files
-
a48f838e18ff54b4386ce09b8aa50bbf_JaffaCakes118.exe windows:0 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 376KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 357KB - Virtual size: 360KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE