Behavioral task
behavioral1
Sample
a4a0280044d3022100fe82ee62d510d2_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
a4a0280044d3022100fe82ee62d510d2_JaffaCakes118
-
Size
52KB
-
MD5
a4a0280044d3022100fe82ee62d510d2
-
SHA1
001a2c744f7792e68d5d768da08af738976682eb
-
SHA256
2357bdeef97aaaa21b6858632399ff1d372fea419a313676bfa95d46f8da7efe
-
SHA512
bc17075ec3a35ae9d62627a01d67ac0b9b82caaecb73e9be45af3e7239ee6f80badaf533d33fc482e571e91b2c247e85a6a245dc31912141797e5ee3be130f72
-
SSDEEP
384:Rd/zvQ5+mcBkYk0d5YjS53P0GLT5AAyh0jyBKD2tzbKD8:rzvQ5+mEkIQq8GL8h0I
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a4a0280044d3022100fe82ee62d510d2_JaffaCakes118
Files
-
a4a0280044d3022100fe82ee62d510d2_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE