Behavioral task
behavioral1
Sample
a88c492dcf8656154c25e975b28d3904_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
a88c492dcf8656154c25e975b28d3904_JaffaCakes118
-
Size
66KB
-
MD5
a88c492dcf8656154c25e975b28d3904
-
SHA1
1693a82fa193628d41b301955edb3542696958e4
-
SHA256
fd828e3e4f449ef4e97113288239d79b1bed5336434fa812acac0d093da89282
-
SHA512
149a4950f3a0fb821fc2ba4aae1fc3f7464d6d7cf2328c609890b1ef13c074475df8b41c7d3542b9287622fb5436ee9dcfec75189a48b2432e1cf74a4d49295e
-
SSDEEP
768:G4veOhIuwkwHHFOPVNHygQ2wZ7mVWkiJuAq42FKXm+BImL9MIhHPr2pqhTCQ:tvprlHy/dJuAsFc75jhHPr2pqhGQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a88c492dcf8656154c25e975b28d3904_JaffaCakes118
Files
-
a88c492dcf8656154c25e975b28d3904_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE