Behavioral task
behavioral1
Sample
acc47104208c1f1eb02e815f5c10fe72_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
acc47104208c1f1eb02e815f5c10fe72_JaffaCakes118
-
Size
549KB
-
MD5
acc47104208c1f1eb02e815f5c10fe72
-
SHA1
7c574ff338cb1fa35fa28f343e413a773a89efc7
-
SHA256
f5560a1def24f918ee1a1bd5720830fc1508d4f7ac43f9ca935b8a856f199e77
-
SHA512
bdcd77106e29e4a2c4b2cba5da8f54292893bec1de1d9e24b18bd8e68fe36451dbd79238595fbc15f9a840975ecbb42c4c62408db6b7c7e2b02ca0657891d187
-
SSDEEP
6144:4QVAuLBRZtB3ICDLTMRxb1CZZl25g8Obt6ePfBjwoQigeOtuc3WPKeRE0ciUOjcc:DVdBRZbYCDL2B1UwubtpNfgDfGW5wRp
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource acc47104208c1f1eb02e815f5c10fe72_JaffaCakes118
Files
-
acc47104208c1f1eb02e815f5c10fe72_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 540KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 191KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 357KB - Virtual size: 357KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE