Behavioral task
behavioral1
Sample
accc26181a8fbfae8461ce12e6e600e2_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
accc26181a8fbfae8461ce12e6e600e2_JaffaCakes118
-
Size
121KB
-
MD5
accc26181a8fbfae8461ce12e6e600e2
-
SHA1
c853dd08f5c55cf740c80500bc77cb32b74e9b0f
-
SHA256
cd071aaa841d96ec90387f2d68c8cdd5419f9e5ad8fd111754a3af1ead3dd578
-
SHA512
5e507754201bb419e4ed29913ff66b7b58dc7b538a79a4ebde0f2dcbfdf7e6af9528f850dbb7d5ef3f289c1f91dce62e8c0eff11f09863708c9c70482235771d
-
SSDEEP
1536:Wk90Y+9vSkwdAwHcOnVYLvEIQmHENdnHLZDmz6PHIQzxfexQEEw7rzv1i:WkaYwS8OmLcIQOEXnhoOfK9
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource accc26181a8fbfae8461ce12e6e600e2_JaffaCakes118
Files
-
accc26181a8fbfae8461ce12e6e600e2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 62KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ