Behavioral task
behavioral1
Sample
a0897f9e72659836aeb0e8bc7ef9f40b_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
a0897f9e72659836aeb0e8bc7ef9f40b_JaffaCakes118
-
Size
425KB
-
MD5
a0897f9e72659836aeb0e8bc7ef9f40b
-
SHA1
5d8989e922a3bccd3166f223dbf948a4c3e85ebb
-
SHA256
3d53b685bf5f1e88e13ea6cf1e3ca5b4daf58e68381d0717e3f273122f82e2d0
-
SHA512
014e775ff2be9cab9ab7fd3c2eb9bc9d0fd72ee8cf94cfd82affa4656cff4b57ce28bef7dc855a5691a7713273b42ace1190d0fd14e9566d2f401ec7ea8af763
-
SSDEEP
6144:6kZWPKBXND6gRa9y/te9H9LgnVlL8VZBPdklwfNSJxyVaIk:6kZWPKBzQy/te9dUVlLGFkefNSJiab
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a0897f9e72659836aeb0e8bc7ef9f40b_JaffaCakes118
Files
-
a0897f9e72659836aeb0e8bc7ef9f40b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 228KB - Virtual size: 228KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 177KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE