Behavioral task
behavioral1
Sample
a8032822ec8353df25c739e07204cadc_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
a8032822ec8353df25c739e07204cadc_JaffaCakes118
-
Size
628KB
-
MD5
a8032822ec8353df25c739e07204cadc
-
SHA1
17c123fd26559cf3bf2d541216aad224abeeb55a
-
SHA256
03fd141178be5b19837d0940d8ddf04d0275ffd621f88ecad4fff361ac35314d
-
SHA512
66ea9b5988071e82c1f51bf32ebe84db93bdb46448078aab835e3a27424a5daf0f51f36302a698c9664cd3d1cd5d8eef6da4200d2180e8689ea9718dc72eefa9
-
SSDEEP
12288:1CsAE1uso6Lah7MnEHYTXoDX/jdTzAKanrvC6BKztHc9hodKyHtj:JKsewEHooDX/jdf7ajCsr79S
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a8032822ec8353df25c739e07204cadc_JaffaCakes118
Files
-
a8032822ec8353df25c739e07204cadc_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 708KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 380KB - Virtual size: 384KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE