Behavioral task
behavioral1
Sample
a3b5c1ce9b0fdfcfb24bcb840b638487_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
a3b5c1ce9b0fdfcfb24bcb840b638487_JaffaCakes118
-
Size
93KB
-
MD5
a3b5c1ce9b0fdfcfb24bcb840b638487
-
SHA1
6969adb6e57c975dd732a0f35dc36c8bfb449ebc
-
SHA256
01e81ae98c19edf72debb479a1b35af537f9a067836c6df03ea24fdd43ba54c5
-
SHA512
50fdc30973deecb927cc7cebdb7bfd19030f5c06c82244b0c233b91151747e6eb21a0071bfc95a71f541400fceda8c0d9ce7b1f257c3890dbf5611f8282924d6
-
SSDEEP
1536:M3o21HtR5sM+M3PnLb3Y56+GuuIT7/X5sqtwgD3+QVsXv6U6UDmCBd1TFfOKljUp:kBdyM+Kb3YrGuxVtmXWUKQFWKxcXxEcj
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a3b5c1ce9b0fdfcfb24bcb840b638487_JaffaCakes118
Files
-
a3b5c1ce9b0fdfcfb24bcb840b638487_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 968KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 89KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE