Behavioral task
behavioral1
Sample
a6bbefbecfaba3ba41a024f819d6083f_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
a6bbefbecfaba3ba41a024f819d6083f_JaffaCakes118
-
Size
3.4MB
-
MD5
a6bbefbecfaba3ba41a024f819d6083f
-
SHA1
815c3b67c2fc1728b735794f2defc8b6028ab04a
-
SHA256
e49c3add0c40bb409fe4f6a4ed10c95fcdda9823f8270c72f14c16624b50a1f5
-
SHA512
4e6dc2c5ca53733d2981d85c660b68dd8ff55e3f7d9d1fde05524e933456ddac331097a098a93cf68b62b03b453df35d9edcfd69a98831b5d29992736675618d
-
SSDEEP
49152:7rrSuWsqvNJh7Tk1jJiIKEdwUAgIEr8QATt1N2/U8ceNtS9tO4xSeyO5UKoSWDI4:7SvhFjk1d7KAA0JUVx/yjKtJ+N
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a6bbefbecfaba3ba41a024f819d6083f_JaffaCakes118
Files
-
a6bbefbecfaba3ba41a024f819d6083f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 10.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 3.3MB - Virtual size: 3.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 66KB - Virtual size: 69KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE