Behavioral task
behavioral1
Sample
a568b034efb244f458e46d9f0219cea2_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
a568b034efb244f458e46d9f0219cea2_JaffaCakes118
-
Size
784KB
-
MD5
a568b034efb244f458e46d9f0219cea2
-
SHA1
221f983e185aadd7b815646c9d5b534e0f775d6a
-
SHA256
9f219ec3aac43164e1b28b85079f7117d74f9a9635851472715aeb8f9933ab40
-
SHA512
8f9ea06eb11066c5656cca7e3a01859f6423e34f45933b3fca3408dd309755f1efe4f5dea989b594b24c53dc691cf7a670feced7e26b2721e4f331d617828eac
-
SSDEEP
12288:ycfL29v1/m0YgAnelLTV4agbA257RoNCxxtKWIorwfAWFd6SrRZ03fl612u4cIWW:hg/Iel9GA6bJKZjICNw82bq1Bplu
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a568b034efb244f458e46d9f0219cea2_JaffaCakes118
Files
-
a568b034efb244f458e46d9f0219cea2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE