Behavioral task
behavioral1
Sample
a2b9a229440dc5dbec065350a77f4777_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
a2b9a229440dc5dbec065350a77f4777_JaffaCakes118
-
Size
56KB
-
MD5
a2b9a229440dc5dbec065350a77f4777
-
SHA1
db4a957ca0f65ed6cc0a81bd59f24c4e4bd8ab7e
-
SHA256
272993eb9cfe686a793abe250f9406cdddc2badcbdad8baefa7e838eea35e0e0
-
SHA512
62bb604d75957e1624ac9641307995d881c5c9702a31604a3b98afe2cf8d2827ba2bfbe14246b7ba70b93367ae0af996071e5a9fec00e6ffb44f2ed6aeab3de3
-
SSDEEP
1536:Qn3ePI9GBVj5UlcY2kktZx17PAFIYGTPOiu:ouPI9GMcDHLPTf
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a2b9a229440dc5dbec065350a77f4777_JaffaCakes118
Files
-
a2b9a229440dc5dbec065350a77f4777_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 168KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 55KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE