Behavioral task
behavioral1
Sample
a80d1b6c840747862af1d9821df71d0d_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
a80d1b6c840747862af1d9821df71d0d_JaffaCakes118
-
Size
342KB
-
MD5
a80d1b6c840747862af1d9821df71d0d
-
SHA1
7b7321adff4ea65b98dd2e3660e5503263d1c9ee
-
SHA256
4cba7a4ce78c7ea19a4d269aeb399feff29072bb0b9a301f229e21c6aa6f35f1
-
SHA512
efdf1ccd79aeab23897012f96aa3f15c9afc1c42d18fec5ce01037ddf19d42d4a4d130258fba00d752f6aa1ccb6bdab65e55753eaba77b3c7fe4bc69294feb7d
-
SSDEEP
6144:/Rqmpp+amNOGokzLyM9tsLAitQo6tzOKkzIt8gKyfjxfR9D2j4yFyuawcox:ZqmpplpGoGL3etQoMiXM8gxf/Sj4y4Ex
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a80d1b6c840747862af1d9821df71d0d_JaffaCakes118
Files
-
a80d1b6c840747862af1d9821df71d0d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 338KB - Virtual size: 340KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE