Behavioral task
behavioral1
Sample
a0c05e8be5b33a50dc801146ea0f4843_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
a0c05e8be5b33a50dc801146ea0f4843_JaffaCakes118
-
Size
218KB
-
MD5
a0c05e8be5b33a50dc801146ea0f4843
-
SHA1
57707c36420faa11158dbdfdf8e392ea388abc3c
-
SHA256
88c55d7e7fb16f2c8642bd8c9a2d6aff86516dfed1947cffe87a8ce84e68f808
-
SHA512
6ca4e3ccb75c7d05dc38e7babf26e62e7194f4ed642368d3e6b018d67835b1c96d6a8ee0b2292ccd08a3f87ed495f873bf060d7d63d69bfdfebba2e6b6fb0066
-
SSDEEP
6144:F5zZsUjtasqieEODvPBUyhsdEI2++M+RlTHYW:F5zLta3iFyhsdEoT+R9YW
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a0c05e8be5b33a50dc801146ea0f4843_JaffaCakes118
Files
-
a0c05e8be5b33a50dc801146ea0f4843_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE