Behavioral task
behavioral1
Sample
acd2533a4f81ef507070c42c97522e06_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
acd2533a4f81ef507070c42c97522e06_JaffaCakes118
-
Size
67KB
-
MD5
acd2533a4f81ef507070c42c97522e06
-
SHA1
e8d46506662f8670df8de7152bdfb5e50c103f51
-
SHA256
40d0007551cabf600887aae67252ee65e781e233b110faa4aaffec78f8084b35
-
SHA512
bd0f76aabed60709d8304899308496b48490842bc5635c23fa02ce1a9eb4ae50504bd0589037143230aea3eca75b5c25b45700a7a06e98e86f0bc60129603ae6
-
SSDEEP
1536:xG7q3ejIIj5aeCK30cThfkMg4RWCCMhFj+24HGbJZlZ:xEq3e8beCGZ1fkMtUlMhh+LHGbJJ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource acd2533a4f81ef507070c42c97522e06_JaffaCakes118
Files
-
acd2533a4f81ef507070c42c97522e06_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 108KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 60KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
yC Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE