Behavioral task
behavioral1
Sample
a6ebc4ff686096f1460a1f5247a652fd_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
a6ebc4ff686096f1460a1f5247a652fd_JaffaCakes118
-
Size
172KB
-
MD5
a6ebc4ff686096f1460a1f5247a652fd
-
SHA1
582b6a6a7898bab032d3d9601c89c317cd5d18f9
-
SHA256
f5e665ce599c91660d61e9f5b6c7c48364aca36f0574f8a464d9dc3dbf79cddf
-
SHA512
07ad1c52e5ce27d0fd4c693ddefb3ec7166452e0d7e8cc7aa2c7985fb8ccd55f68c48f6b84f4bda2e97420ab6a02e9f5df0d0bcce5f3d5d9b7754ae6994beffd
-
SSDEEP
3072:hgWf7x0JWVrNhaNTZ6gpISvG6lRRNv2ex5M/G/jWDKt5K5UA5BZFeCeqI:u+mCrfaN1jpISPlR72O5M/G/jWub9AjA
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a6ebc4ff686096f1460a1f5247a652fd_JaffaCakes118
Files
-
a6ebc4ff686096f1460a1f5247a652fd_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 44KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.NUPX1 Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE