Behavioral task
behavioral1
Sample
a0f098d4b5d92fdae488c1ec73840e69_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
a0f098d4b5d92fdae488c1ec73840e69_JaffaCakes118
-
Size
466KB
-
MD5
a0f098d4b5d92fdae488c1ec73840e69
-
SHA1
a86d83b799519da4ca5e77907d3b978a4504cdb1
-
SHA256
a79b39082be429c6576c9b20be2bb2b50a2dfaa108a4953f28ba7dbda724fd54
-
SHA512
78c196e49646d829585b3ff904f986720cf057d5e4aac723ff04d4f0297b1df1e03e02ed4d4167ef60512e1cde61f5f1aac58fee24c7a3929b105f6b986c5714
-
SSDEEP
6144:ebaQ0/Vc+USl3eYjDZ63Q34Dk9lf85306XZoy:ebJuUajl63Q34DSfE30ooy
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a0f098d4b5d92fdae488c1ec73840e69_JaffaCakes118
Files
-
a0f098d4b5d92fdae488c1ec73840e69_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 288KB - Virtual size: 288KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 175KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE