Behavioral task
behavioral1
Sample
a4d5345260c755f0d7fefead74a5f4f7_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
a4d5345260c755f0d7fefead74a5f4f7_JaffaCakes118
-
Size
258KB
-
MD5
a4d5345260c755f0d7fefead74a5f4f7
-
SHA1
31573cd56873e2781514931616869141976e1686
-
SHA256
501d5d0e6bb3b6f3bb06b51b7a4a2ce980b89f2df5fc5b4b8022377cd56bc5ef
-
SHA512
e80769886ef81b4b3418058cca7bc0f7425a676909b5be47ff6aa0bff9256de100f56a24e7743fd5e18f3755ca7f89d6f4f9628313b52d72372a8b16ddaff3ea
-
SSDEEP
3072:vBH9kXjExB4E55mi2nb0Wlj1ing/rwnxwt6r1hROCfUUXXenG5Kzgegp6xBNmQMW:YVo5Mo+0ngcnxX15enjxXk0EG
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a4d5345260c755f0d7fefead74a5f4f7_JaffaCakes118
Files
-
a4d5345260c755f0d7fefead74a5f4f7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 116KB - Virtual size: 116KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 124KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE