Behavioral task
behavioral1
Sample
a565457623e7929fcc309f2acd84bf24_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
a565457623e7929fcc309f2acd84bf24_JaffaCakes118
-
Size
241KB
-
MD5
a565457623e7929fcc309f2acd84bf24
-
SHA1
4c2a7965990ff9afbef8d7bf1c09e3ba25e46a12
-
SHA256
7c0322bc5a048f3eb55dfefb69b886851ac154d669da7d9e604f3c94de77f167
-
SHA512
bdea53e3ee3eac8b94384bffe02b698760da8715bc035c81bc4bb86c87ec45c8b4a4b3ccab3276e8520772ee47487de211e1ce2ac23e173cbf87f03dc5bd9f5c
-
SSDEEP
6144:L11Ae347ppLQAyJJgskpjBGW9Js2YuXQdO5L1Zsvfm:3r34jY2sYBR7dn1svfm
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a565457623e7929fcc309f2acd84bf24_JaffaCakes118
Files
-
a565457623e7929fcc309f2acd84bf24_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 166KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE