scan
Behavioral task
behavioral1
Sample
a882a19341af16b27926f9d5fa321134_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
a882a19341af16b27926f9d5fa321134_JaffaCakes118
-
Size
15KB
-
MD5
a882a19341af16b27926f9d5fa321134
-
SHA1
aae3d97da984b9661a2447cac94f92908226f84f
-
SHA256
f4af37339911000174dbcc00806ba80297385392d8579a549bd6d52cddfee9e6
-
SHA512
7bc4b614a863ecf6b99a151da470588f2c88c4413bb29f5e9d929d8057d06a5a801efe6e686395ae959640436eef3f57b47dfe6b99695a0e1994714a986a2023
-
SSDEEP
192:Xjbkc/s0HIHV6XaRtwTOgYj9TnIQDLiyU61PKD4pY8wWYPNiZe48YOtOAekAoYDc:Xjz41tRxgg9r9nFF0cz8Y+d++wJDhC
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a882a19341af16b27926f9d5fa321134_JaffaCakes118
Files
-
a882a19341af16b27926f9d5fa321134_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
UPX0 Size: - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE