Behavioral task
behavioral1
Sample
a8d2b42ef7a515c368c47c8229408275_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
a8d2b42ef7a515c368c47c8229408275_JaffaCakes118
-
Size
784KB
-
MD5
a8d2b42ef7a515c368c47c8229408275
-
SHA1
18d3bf66950e2a40fa27605206604d9b4b4f7ffc
-
SHA256
38ce8f64ecaa1408c671d65ee56a9d81b6cdf0e17dd2ca552c9e253766bb34f8
-
SHA512
ffa43525bbe0c35b62e2872b8266dd6822d43248291a532a21d29d1df3b4d9036be7388268c59e19d7c8b4f323d889717b79a1e0fc9469008e9d2f3abe757693
-
SSDEEP
24576:TUTtY0nNbUxuMwyu39fDp1cg1F1IdR1rrcDDP:TUTtY0RUxwyuNDp1LzID1vM
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a8d2b42ef7a515c368c47c8229408275_JaffaCakes118
Files
-
a8d2b42ef7a515c368c47c8229408275_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE