Behavioral task
behavioral1
Sample
a3ae9037724f6f8461636095f55e92a5_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
a3ae9037724f6f8461636095f55e92a5_JaffaCakes118
-
Size
5.5MB
-
MD5
a3ae9037724f6f8461636095f55e92a5
-
SHA1
23689dc230a43001f799dd57d47fa02d3990ba25
-
SHA256
c6cdef29852e75f53751be6fec5747d5a3db521874717c6766a0dcf2f437b0ca
-
SHA512
2c4e623edbafaec49bf19b9c5903e48f30a94604bf02afe801108ea2ae36a500d3000ebe594cd76ae6f882998f9468dc6639fa83a780b1d83f8c2771dd52beab
-
SSDEEP
98304:052D26+wdbq5IFB5bDcUHhSiN4TnRV7MZomvL981WsLu:052D2zGjFBtcUHoi6n7UL93Mu
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a3ae9037724f6f8461636095f55e92a5_JaffaCakes118
Files
-
a3ae9037724f6f8461636095f55e92a5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 14.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.icon Size: 11KB - Virtual size: 11KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE