Behavioral task
behavioral1
Sample
a5b3cc5ccc5a0cb198fc41ae2e66b034_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
a5b3cc5ccc5a0cb198fc41ae2e66b034_JaffaCakes118
-
Size
784KB
-
MD5
a5b3cc5ccc5a0cb198fc41ae2e66b034
-
SHA1
726b9d20ff32c06365497c6ac7f92000c3529ef1
-
SHA256
12dab57da14e50e2f72bebd731708a893b2a388130051c2ae1c8c4dfb9420676
-
SHA512
76f0fdef7a75df2c9212e97c55656b25488252af39c57ff15270f08b5bc8a658dcf36d2388d643fead34219e6e2dc09f3fea4b3bc93c5fbe2a5b81784cfea63a
-
SSDEEP
24576:muYu8suUS90avslP5pshMqKvf9opYMnOMF:d8snSWxshXof9cdN
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a5b3cc5ccc5a0cb198fc41ae2e66b034_JaffaCakes118
Files
-
a5b3cc5ccc5a0cb198fc41ae2e66b034_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE