Behavioral task
behavioral1
Sample
a517795c1feb0acb27539cd52df7cc7f_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
a517795c1feb0acb27539cd52df7cc7f_JaffaCakes118
-
Size
784KB
-
MD5
a517795c1feb0acb27539cd52df7cc7f
-
SHA1
09dad743f390805a3f0ffc3709a29c4f533a6abf
-
SHA256
573e40896ec9f9bdc1723e59ed71128ef40370d0099a6527987b2e57f8b1bc5d
-
SHA512
4788769c8e920d35f3052fccd39c66cad90bdc7e2ed2cae212c328a9350a7d3e8418ab23320353222de07c742248020865677cbc2d1736af08f5fc6025b91046
-
SSDEEP
24576:23QClD38yMnlcQvye9bFkR1WulWFSEOSO:1dnlcQvx9bFkR1D8F
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a517795c1feb0acb27539cd52df7cc7f_JaffaCakes118
Files
-
a517795c1feb0acb27539cd52df7cc7f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE