Behavioral task
behavioral1
Sample
a1b4d271c1304834fc00e7ee7c8b9183_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
a1b4d271c1304834fc00e7ee7c8b9183_JaffaCakes118
-
Size
149KB
-
MD5
a1b4d271c1304834fc00e7ee7c8b9183
-
SHA1
1cc7687ec121c337bdbbd06ecd75bb808caf571b
-
SHA256
9bea69daf1958336346240337e4c07a82113f75d53f02f035cfbfcbdba35acc4
-
SHA512
c90e994463dea8b65cd6c047672ae64af9da66a7a8713ef113efae01c7bf41996f6710d5c90be0f3295c33bbff273dbe3ed05f3c3195e3d05a30fc8a28228c34
-
SSDEEP
3072:7OurKRwsV+DwIWcmbVS4wPM0ZpZnPNBzBqsDzKVuKZFGde7ANZFpjZsOouvF:q6KRMXGbk4EpZn1xau+78X3oEF
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a1b4d271c1304834fc00e7ee7c8b9183_JaffaCakes118
Files
-
a1b4d271c1304834fc00e7ee7c8b9183_JaffaCakes118.exe windows:7 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 176KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 146KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE