Behavioral task
behavioral1
Sample
a527952b93a18a5d92c2cfa33db9d9e7_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
a527952b93a18a5d92c2cfa33db9d9e7_JaffaCakes118
-
Size
17KB
-
MD5
a527952b93a18a5d92c2cfa33db9d9e7
-
SHA1
e6bfe68b20d2021a3ce7e7542aa66a9a0914598b
-
SHA256
9ff41cf8ae937c42f76374c7fd8ddd849b401df4610623e270917c863dfa493f
-
SHA512
f599a61ee3183a78766658fe6f95edd24f7b5f48a15f07b6911ee2fe3c6b7d16278fb66d3be1001b19adc7d0e0d7a9a9ea614d398dd2eddef0d1c6b191293307
-
SSDEEP
384:RrJrw0Ey0R0lIpzfWBcWnLbL7hlHuqG/sN9pGO5nOzwFHIUhD+U:RrJrVErDpzPWnLThZRb9XnOzUIU0
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a527952b93a18a5d92c2cfa33db9d9e7_JaffaCakes118
Files
-
a527952b93a18a5d92c2cfa33db9d9e7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE