Behavioral task
behavioral1
Sample
a6798a5f2e076cc720bccf1d9203432e_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
a6798a5f2e076cc720bccf1d9203432e_JaffaCakes118
-
Size
169KB
-
MD5
a6798a5f2e076cc720bccf1d9203432e
-
SHA1
13a5fdeecd35ce3f35e60ef739f8a3191ae12b38
-
SHA256
e56dea8d1cad0a4448b8796784e9e86fb9bc01521ae404487730bbdd89adfa13
-
SHA512
8fb1203ee9cd8d9f8b5e7813ad638ee2174a770ad6f7e758d83ff112e1f2ace9bbad5433a3bd9bd0023399fa07a0722aae40042ecad904b101706a8a9d0be4d6
-
SSDEEP
3072:LYgAt7ebW78cseKIMLIbxtAJ2qzz9jUg27BRgQvnfL+sFaGRcXl:LYg47e0MFYYh4g27BRgA/dU
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a6798a5f2e076cc720bccf1d9203432e_JaffaCakes118
Files
-
a6798a5f2e076cc720bccf1d9203432e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 120KB - Virtual size: 120KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 43KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE