Behavioral task
behavioral1
Sample
a240ed06a952ed26a34f8fa49a1d0daa_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
a240ed06a952ed26a34f8fa49a1d0daa_JaffaCakes118
-
Size
165KB
-
MD5
a240ed06a952ed26a34f8fa49a1d0daa
-
SHA1
ae884cfe8258ba3f309b2bfb5f49891c1bd01c65
-
SHA256
a1622e99aecd6f8112c8311f260cd483e245c298bfcc3b4930a2fd3db8ebfa76
-
SHA512
b356afce61859f66eb1fcf3d55d2b9db0fc535d3c18e19d1e433f3d3ed405780b31739bce2c138e202cd4e32ceb95d073e3d51a473801970a413fe7322445511
-
SSDEEP
3072:5OJ9e8hRUwiSxfhv9yLJx0kUFYpdXWWhCaZqMwg1JC:5kFj8flpdlhCfMw
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a240ed06a952ed26a34f8fa49a1d0daa_JaffaCakes118
Files
-
a240ed06a952ed26a34f8fa49a1d0daa_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 70KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE