Behavioral task
behavioral1
Sample
a58980a4b02c30ecd1433f868908e84b_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
a58980a4b02c30ecd1433f868908e84b_JaffaCakes118
-
Size
784KB
-
MD5
a58980a4b02c30ecd1433f868908e84b
-
SHA1
c29e4aea3bfc7fc3fc14ab403a31dae972f204f9
-
SHA256
c62b2cbd94a5c74f41922cc68786ef70f03160c4a7eee05b4e7c22e86458d29b
-
SHA512
d2357f371de87d20b36895fa4e7d93db2649b34b814c0390ce8d02f597dea2bfb831d6855dd433438ba754335b2ce09c9fecc4d625f03a0fe887e3c4f58c0a55
-
SSDEEP
24576:CXASt8ba3w1Eua9ybvW3l0Y2AXVDNpF88UMfs/7L:CX76bxRW3pX3/dU2k
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a58980a4b02c30ecd1433f868908e84b_JaffaCakes118
Files
-
a58980a4b02c30ecd1433f868908e84b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE