Behavioral task
behavioral1
Sample
a59d2b90c01d54d7649c697853a0bfe6_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
a59d2b90c01d54d7649c697853a0bfe6_JaffaCakes118
-
Size
714KB
-
MD5
a59d2b90c01d54d7649c697853a0bfe6
-
SHA1
21f15e2ff935d5e99ac28ec96c271e3101e46011
-
SHA256
0b9e36c33e526445f10123e7ca116f618cb48bf01d26fa1699d79256d7842bcd
-
SHA512
06d49c380ba3765783aae980b327581f0f158f7aa45d84803200956b76dfbad4941cf48e69484d16360ab9ccd81fa0d20674ac546680568dabf1c6b98872232b
-
SSDEEP
12288:OchuOqaE79O4/OsLvTLct6fQOMiauhRW/6l2PGqEAHSNgHGmc1KpEhcwfb6dHhfr:O8nEkkLvJfQviauhNsGEZmNKpEqwKD
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a59d2b90c01d54d7649c697853a0bfe6_JaffaCakes118
Files
-
a59d2b90c01d54d7649c697853a0bfe6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 710KB - Virtual size: 712KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE