Behavioral task
behavioral1
Sample
a8616bdc0cfe10ed8a5fb76519089a99_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
a8616bdc0cfe10ed8a5fb76519089a99_JaffaCakes118
-
Size
29KB
-
MD5
a8616bdc0cfe10ed8a5fb76519089a99
-
SHA1
a6530b817e7330a0cc20025e542707a7aa748885
-
SHA256
056c3370cca9c040ddadc0b9623b53ff4e278a4d9259b07d738c05ef1833c8eb
-
SHA512
676defbd69283e6e5d965d1c0e91711233cebbeb872f3837631edd122fdc1ee36dc5ad976fe822764c3ab51b0bed68011b631ab0ce994b2b9f492bada5f52694
-
SSDEEP
384:rHtFFUQKcmlvXAsua+cTG/s+b9o4WdDmvueSRFL9ZY7YyyQTgo1W8ikgBiy:TtLUQKj1kxbE4o4DuRLwB1AkTy
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a8616bdc0cfe10ed8a5fb76519089a99_JaffaCakes118
Files
-
a8616bdc0cfe10ed8a5fb76519089a99_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE