Behavioral task
behavioral1
Sample
a32cd860ec8e26435ac5dad96d04f770_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
a32cd860ec8e26435ac5dad96d04f770_JaffaCakes118
-
Size
302KB
-
MD5
a32cd860ec8e26435ac5dad96d04f770
-
SHA1
f3e7462c8679238ba0bacb896d2b1c04dae3f3c5
-
SHA256
b01b85cba46bc7238e64cd4c90c40716c8e0b5924ee8af69b88860765582419b
-
SHA512
204949d894b27556cbcd6166cb46faa1cff3b3d4bad8f6ce7e5c2ec274b16cef85197f08335ef8f15c71f33797e2e81c5e1aa58b098204f812abee78c3917ea3
-
SSDEEP
6144:BTKxUxBKf3X6Bg4SPfrHMXUE9N0Ru+6H8Jeh9:BTmUjKf3qu4SPfwXTN+Y8J
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a32cd860ec8e26435ac5dad96d04f770_JaffaCakes118
Files
-
a32cd860ec8e26435ac5dad96d04f770_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 160KB - Virtual size: 160KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 124KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE