Behavioral task
behavioral1
Sample
a4bf545c4eec6c2690d888ef664a23d7_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
a4bf545c4eec6c2690d888ef664a23d7_JaffaCakes118
-
Size
5KB
-
MD5
a4bf545c4eec6c2690d888ef664a23d7
-
SHA1
1d62a0c6502329f0857204a75ee653089cb91e62
-
SHA256
2c7602c81c7571553a1ca97752cf8b8b117271c928892daff33b89530e62cf6e
-
SHA512
42ecee0b57c50d3d84e3c8062bc310347f4c6f5bab5f374599d9f9f7a6d000b47bdd2ac6a667f5b04e7fc6316eaf253794f08056ffc21222f32c112e84193889
-
SSDEEP
96:+gvHmjdhU8L9d7XTNSmKQiDdK9tDoAmFTrSVdr6kDli9dR03:JvHmjjRd7XhSaiDc9F0TYdrLM9303
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a4bf545c4eec6c2690d888ef664a23d7_JaffaCakes118
Files
-
a4bf545c4eec6c2690d888ef664a23d7_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE