Behavioral task
behavioral1
Sample
a1f2eb2b26db0b54fad1ba0646b5e436_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
a1f2eb2b26db0b54fad1ba0646b5e436_JaffaCakes118
-
Size
784KB
-
MD5
a1f2eb2b26db0b54fad1ba0646b5e436
-
SHA1
a22c189fdef9cd115edb93eb5c2da57c46a017c0
-
SHA256
5234f0408b829c04d01d6a3c0f65581a6fdc619f41a98bc1cb94e645c830fdbe
-
SHA512
f8152d977d37c1e894399540d0ddfabb12d4232ec778ac923b4248af2d10b92761942ae80b3d5c63a9921530376278274add7e26aad397338dc332c34729cc40
-
SSDEEP
24576:3gLyP2WwlEruY6/WQoZfiWHOdbtsBTFwoG:3gyP2WwTLWh8fsNFwo
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a1f2eb2b26db0b54fad1ba0646b5e436_JaffaCakes118
Files
-
a1f2eb2b26db0b54fad1ba0646b5e436_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE