Behavioral task
behavioral1
Sample
a2fd45883eef070bc1d38c24ee13e699_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
a2fd45883eef070bc1d38c24ee13e699_JaffaCakes118
-
Size
784KB
-
MD5
a2fd45883eef070bc1d38c24ee13e699
-
SHA1
35cecf28fc74d1e40d1ff9c143abfed31f6ecf13
-
SHA256
921f9de600566c413a9b7a02634a7fda25442608b661d16e14d779192a0a653e
-
SHA512
da7dc0a9e4c46af315b4ddf4a9d22d9a68880ddc3da33bb51e06468ad425d434afc149646e48b738e760bc9ddc39b997e50e9eddbc7b7c757a6c0af2b278eb19
-
SSDEEP
12288:7ewRknwmeC82V494C6JYzL45RBP/Pey10jgyU2TdDxs9/38m5+gpYTpyyFMR2Td:7eRnpThCHLcP/hkaf8m5+g+Vao
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a2fd45883eef070bc1d38c24ee13e699_JaffaCakes118
Files
-
a2fd45883eef070bc1d38c24ee13e699_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE