Behavioral task
behavioral1
Sample
a32a3b4eacdf5a84e209f7c92ee6dbbd_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
a32a3b4eacdf5a84e209f7c92ee6dbbd_JaffaCakes118
-
Size
206KB
-
MD5
a32a3b4eacdf5a84e209f7c92ee6dbbd
-
SHA1
343b9cbb9424cea5b261f078467c42f98d1c4287
-
SHA256
cbb159c529b86ee74d0a7abcbbc9e362b723cb62f5592a4efab906d0ac793eb9
-
SHA512
7692393a4a0cc06f02e541656c9108aa8c8a264631bebfa7a8db9c7f386cf68de760c250be393b05ae82d902c94890e48c945a3cfdaf3797ad16ae5698ac0d71
-
SSDEEP
3072:NlcL4Wo4gqKIT2lUL1xiYwvX7YwCQZZpH9DAOgcUxZy5hJoutW00xBQ:Nleo4guqCLtQLtZx3gcUnuJoS0Q
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a32a3b4eacdf5a84e209f7c92ee6dbbd_JaffaCakes118
Files
-
a32a3b4eacdf5a84e209f7c92ee6dbbd_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dswlab Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE