Behavioral task
behavioral1
Sample
a628d5cbd1aa372effa817fb30e392f0_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
a628d5cbd1aa372effa817fb30e392f0_JaffaCakes118
-
Size
369KB
-
MD5
a628d5cbd1aa372effa817fb30e392f0
-
SHA1
48eef3fd8c4992b1de9527dc8a6477de50ba4a4e
-
SHA256
c0eafa684a3f3c99b8f810321a5c1f42eef5c4a8cb1719471c4215a7aee94a45
-
SHA512
e23ede7e9507eea05163f0719138ac2d60619df468e4b98f659901965ee5f1b11907e13af1daa01c8e765455058fa7b5e4516bbb4fbf59a462a71f6c49cd7c51
-
SSDEEP
3072:5YAfxX3lz4WR6IM4lGTMEe4ZhOG8JlTv0rpl:5Ygh1MbEkOGkzyp
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a628d5cbd1aa372effa817fb30e392f0_JaffaCakes118
Files
-
a628d5cbd1aa372effa817fb30e392f0_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 240KB - Virtual size: 240KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 72KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 56KB - Virtual size: 212KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE