Behavioral task
behavioral1
Sample
a335b20e127617b0500bbfb45872d09a_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
a335b20e127617b0500bbfb45872d09a_JaffaCakes118
-
Size
30KB
-
MD5
a335b20e127617b0500bbfb45872d09a
-
SHA1
b35a62e77f14161e7ab611c599d863000d71e158
-
SHA256
827773f2698aa1b5a80a583f2e4039f4c5375f4bccf53ddd96f9a92bf9e7dd90
-
SHA512
72ad15249bd7c20d26214d0de3fbc89f23d7c72dfcc8482eb3d67f39b1a6e8a553b4bad00027e33487964ade9ccd6369c95e6d5206720eb065f9cfdd8b596ea9
-
SSDEEP
768:Mndni8BxIw/qsA325ixrKbFWd64YG05o4BZVHznbcuyD7Uw:MnrxqsP5iUbFDNGephHznouy8w
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a335b20e127617b0500bbfb45872d09a_JaffaCakes118
Files
-
a335b20e127617b0500bbfb45872d09a_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 88KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 28KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE