Behavioral task
behavioral1
Sample
a505889625ed6223ca8fbe8c645176a7_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
a505889625ed6223ca8fbe8c645176a7_JaffaCakes118
-
Size
257KB
-
MD5
a505889625ed6223ca8fbe8c645176a7
-
SHA1
08b37cc306486115ad44f91769fe6d3948c4f0df
-
SHA256
7a0075bbfb9a65003796fc3b0fa197f92c2760c3cb6bd2b3158b2b23aaea8eb1
-
SHA512
6a943e36d82a3582edb06d4d480f1f0c33a7349db292ea79387662d47458dfdb7d882e844f18e82b27b11e833042a69d9786789a6a583280735c3c5ea8e56b01
-
SSDEEP
3072:Vk4nXn+1HRah6PYObB0kot4kJ7bvC9RibyoutP:VJcHE0gOcEsbyoS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a505889625ed6223ca8fbe8c645176a7_JaffaCakes118
Files
-
a505889625ed6223ca8fbe8c645176a7_JaffaCakes118.exe windows:8 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 168KB - Virtual size: 168KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 85KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE