Behavioral task
behavioral1
Sample
a5e043870c4a8f5e58b642e81366edcb_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
a5e043870c4a8f5e58b642e81366edcb_JaffaCakes118
-
Size
784KB
-
MD5
a5e043870c4a8f5e58b642e81366edcb
-
SHA1
943d51c0aa6e01363bf7ec5e8280257e440e00e5
-
SHA256
8a00c9ddf6d823903a4729311fe51f6321251065e6e89aa980c4b2b2ffdd9c71
-
SHA512
95c4f1495061252cca15fd760be67a3c2749ede89881faa5ee647c5361a0b40cc2902af4a2f28a07b6de89e58d38e5691393c06965f56f44b595754ebf66f142
-
SSDEEP
12288:rDzh+wGJ4vLbLpTsMIQQiSxaCYIo/EgPyzouHeFJlPj/CqIq1:bjVwiSxaCYIljeFTI
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a5e043870c4a8f5e58b642e81366edcb_JaffaCakes118
Files
-
a5e043870c4a8f5e58b642e81366edcb_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE