Behavioral task
behavioral1
Sample
acd8dbc3adc39cc2c76d5e4c66d770d3_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
acd8dbc3adc39cc2c76d5e4c66d770d3_JaffaCakes118
-
Size
40KB
-
MD5
acd8dbc3adc39cc2c76d5e4c66d770d3
-
SHA1
724da6540ae5033f7d1a8491560271e06fc9df7d
-
SHA256
e64e44d8649d7f00af4c4f109c9a8b31b9f70c9616c0c5ec3b8b3601d370c35e
-
SHA512
eb4d62abce5b0107951db9ae37a9042f93c4acbef9eb4a704294a9336788fcec1291711ecbaa8de66401ddc32a706ba9db80ce283e9fe3442e066c4ac7004e70
-
SSDEEP
768:63ECNFNAoUuSFb5vfBSo7UzlyDjRLzqR0hza7WHYycLd0EGynbcuyD7U:60wU7ZYIUxsjB5IW4ycLX1nouy8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource acd8dbc3adc39cc2c76d5e4c66d770d3_JaffaCakes118
Files
-
acd8dbc3adc39cc2c76d5e4c66d770d3_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 38KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE