Behavioral task
behavioral1
Sample
a85fabc847fc38b54a1fe5a496378c93_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
a85fabc847fc38b54a1fe5a496378c93_JaffaCakes118
-
Size
255KB
-
MD5
a85fabc847fc38b54a1fe5a496378c93
-
SHA1
c624cf1c6eef45ffb1f410e21818441f993055be
-
SHA256
e105e15f932c1834447d525d28ecd236ae2e83d2b1758b3ad992e6c7d95303e2
-
SHA512
924d6bff58869c845d7c3aac1a7da90e86f0b848267c540d65124a6a430f78936cceb48b98d18725b71726776c016308629f15b1bdfba3da5c323044d0cbd861
-
SSDEEP
6144:MFVlKq5Z+hIB03bJkZ95MKZbTcS3HihAV:MzR5BsW9hHJ3HpV
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a85fabc847fc38b54a1fe5a496378c93_JaffaCakes118
Files
-
a85fabc847fc38b54a1fe5a496378c93_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 156KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ