Behavioral task
behavioral1
Sample
a4c56045215ac45ac593da963bea5f9d_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
a4c56045215ac45ac593da963bea5f9d_JaffaCakes118
-
Size
123KB
-
MD5
a4c56045215ac45ac593da963bea5f9d
-
SHA1
fc0046741dc1c7d55e7214713cdc82011dbafaf1
-
SHA256
9ce10c0b71bba61d9b1e6ccd9fdc55dc162b6be6f518ee11ee99c429147a3518
-
SHA512
6b22aec349a028e9906ae8fadcce7d03409d469abaf282893a6e4cd6704ad93cb02a923c2630ae7c88de3cbc935145a824fcc31741f730aeb1d982823f24f3ed
-
SSDEEP
3072:NeSQ41MZrrOwzrq5Ss9eYfphfFQkUcot3EpeBWLsQyj:NVYrJrOSsRwcpAj
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a4c56045215ac45ac593da963bea5f9d_JaffaCakes118
Files
-
a4c56045215ac45ac593da963bea5f9d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 107KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
42vab535 Size: 62B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
oqvrztrg Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ