Behavioral task
behavioral1
Sample
a756466fe83cdd11e12fba3644c9f60d_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
a756466fe83cdd11e12fba3644c9f60d_JaffaCakes118
-
Size
677KB
-
MD5
a756466fe83cdd11e12fba3644c9f60d
-
SHA1
de391e7a8a2ddef65b68a26b9330737eadf8a9ea
-
SHA256
2f0fdd84cfd49c512ed1c92b3a32f973687226d7d282c7047333ca3aaa02c69d
-
SHA512
2137eb4a90f5f13e48fbe1eaac3d297c2668473b777e3a30b4fad90805347eee4cf35d2240c4f29ecfa8a677761749b37f4e3cdc5e71f4d8d14603c068aad12c
-
SSDEEP
12288:WzL90nof+ogCJk4x4jNL2ooKfgGx9npgtHVWif4K1V4adLd+TvWuvQIsyLHJ:5iHgC7x4ZL2oPDp6gu4SaULs6yLHJ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a756466fe83cdd11e12fba3644c9f60d_JaffaCakes118
Files
-
a756466fe83cdd11e12fba3644c9f60d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 420KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 235KB - Virtual size: 236KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE