Behavioral task
behavioral1
Sample
a186ee6b5209b84da0a722d512204049_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
a186ee6b5209b84da0a722d512204049_JaffaCakes118
-
Size
217KB
-
MD5
a186ee6b5209b84da0a722d512204049
-
SHA1
9ac3471c7a0669e672653514f05d35b7e750a3c8
-
SHA256
4588323111ff5c9e5bff081d338b2de335b3dbd8e472c59eb3202d8fb61dc65a
-
SHA512
0136f3a47011ca7a2530d7d23e51a6c37cd89a846ef0095fa1ef9d3a5c15966d4726a1807fc9d6b4de4857d9a2d971934d1f2fb6fc87567fbd1f8261df44592f
-
SSDEEP
6144:qKaMebIYrlF2kshT9QH3UWN/K3NIUablbh7:7aNIYrT5sAX5N/waxt
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a186ee6b5209b84da0a722d512204049_JaffaCakes118
Files
-
a186ee6b5209b84da0a722d512204049_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 388KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 208KB - Virtual size: 208KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE