Behavioral task
behavioral1
Sample
a576b28d482e86b4cc709946c2a7a476_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
a576b28d482e86b4cc709946c2a7a476_JaffaCakes118
-
Size
451KB
-
MD5
a576b28d482e86b4cc709946c2a7a476
-
SHA1
c55dae420eaa565d7d1338c3c75a5bc1ff86c49d
-
SHA256
187799986b739098c9665d5ecc80c45390ea0d6fcad7d23bbd2578e5c869ff63
-
SHA512
c70bdbdf5d4e47e33e494cf959b7f20acdfa4e0fa6221dfc0b84bf3d13fb5afcce10a43bdd16a8868579f9aa764fa3b1545fb7accb378f3094d6520007587b93
-
SSDEEP
12288:LZFoJem1x+w6lr2/v5omDSi66TK268HYrwi96VLVoS:FFAekMwB5o6HmV8HsjML
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a576b28d482e86b4cc709946c2a7a476_JaffaCakes118
Files
-
a576b28d482e86b4cc709946c2a7a476_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 425KB - Virtual size: 428KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE