Behavioral task
behavioral1
Sample
a8c1c40d7baa00be6618b06c9a1fda99_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
a8c1c40d7baa00be6618b06c9a1fda99_JaffaCakes118
-
Size
167KB
-
MD5
a8c1c40d7baa00be6618b06c9a1fda99
-
SHA1
295ef54da777c6ca40e4f3e66f5ad107de959f8e
-
SHA256
0ccb862e89266b2dde758b33a010ab6863f179a0ec3a25e12f2f65a945bfefef
-
SHA512
13a4f62a21d6becd8c9ed39340f25ea0762d728d948b95ecc4d79a905e58c69a2ffa97924ee03fa01812c1a1da29e35f37e1c6366fc35f210a2ad5dc6a028d61
-
SSDEEP
3072:SdZ5e3+mSp7EslVNMgQuSZPNkuFpJb2duR7+AlYF50JqoVkwp0NRUSrrou5ksG:TVS1EshJ9S9NkgpJbNR73YvOqGkwphSk
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a8c1c40d7baa00be6618b06c9a1fda99_JaffaCakes118
Files
-
a8c1c40d7baa00be6618b06c9a1fda99_JaffaCakes118.exe windows:8 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 172KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 163KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE