Behavioral task
behavioral1
Sample
a0f995c34427bc8cc3ccca6059af298e_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
a0f995c34427bc8cc3ccca6059af298e_JaffaCakes118
-
Size
1.6MB
-
MD5
a0f995c34427bc8cc3ccca6059af298e
-
SHA1
542782139d37997e38659bc543f58257410b92fe
-
SHA256
dca796fd9d457749a5b27a51179518a98ae9d4368ca9f327e54b939a9138b62d
-
SHA512
f3f413ec41ac8eb8c7b4cb15d0182f4af8d6a64d720e944d2f47297d9dd8af78cfcdfa9757051b701a7cc0ff5f55be21ed2d428d5cf90c55bdc7dec3c289f078
-
SSDEEP
49152:PcKPYlXee2RQG9fZEz0SeyKvpS0suVnEzVwvI:kjXaRQxzSx0oEzVt
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a0f995c34427bc8cc3ccca6059af298e_JaffaCakes118
Files
-
a0f995c34427bc8cc3ccca6059af298e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 17.7MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE