Behavioral task
behavioral1
Sample
a8b20dc00ad7af1cd8a0f86cbd3c0da5_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
a8b20dc00ad7af1cd8a0f86cbd3c0da5_JaffaCakes118
-
Size
223KB
-
MD5
a8b20dc00ad7af1cd8a0f86cbd3c0da5
-
SHA1
f3f33d9c1889e20e6e4bb6b836e89cdcfcfface3
-
SHA256
24a124556e4d8a3f16f86c1b1e246dbc24c15fbfedd759061dedc9594222f6b0
-
SHA512
8f222a82cac8d7d78b5a6a0748fb05e104533f47a3a0fe0ad336c6dea4707360920a55fd2b8980839f1f3cbb5ae0839c630090e272a223d7054fe3f186612b85
-
SSDEEP
3072:qhfR2TBwrOOsr3uIGeAkUiTdiqXpsAaD+xaVcpltSHvLKPKKYPLi8j16jwb:yMT+rOLeVLYRi9VI4jKiKYjN
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a8b20dc00ad7af1cd8a0f86cbd3c0da5_JaffaCakes118
Files
-
a8b20dc00ad7af1cd8a0f86cbd3c0da5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 120KB - Virtual size: 120KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 69KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 33KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE