Behavioral task
behavioral1
Sample
a4c7d2b472a6df115589dd6c0bcf6b22_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
a4c7d2b472a6df115589dd6c0bcf6b22_JaffaCakes118
-
Size
56KB
-
MD5
a4c7d2b472a6df115589dd6c0bcf6b22
-
SHA1
0fc93d03e269399491c4dc845e28652888f2121b
-
SHA256
c3790a9eac34d163b447911a728c613758365a69c98ab7108ac77be4bd745622
-
SHA512
7c17f8d0ee7277059234f85e5e3614e13cb24756b0498dff0a957e8b80d5ac6aafdc244b2bf0db0bc62132afc81ee97a564a9758943f3eb38bb152e1d9d0cf90
-
SSDEEP
768:m+wzRveczsZgbDjTcuocZR9Klya2y/KYAlFu6KTzBP+QU5D95Eh/vaUbdrU+NO:6zojZKTjocZzKl52VubR+QU5xgvFU+M
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a4c7d2b472a6df115589dd6c0bcf6b22_JaffaCakes118
Files
-
a4c7d2b472a6df115589dd6c0bcf6b22_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 168KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 55KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE