Behavioral task
behavioral1
Sample
a91c6189344a131b50139cdc55324e93_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
a91c6189344a131b50139cdc55324e93_JaffaCakes118
-
Size
176KB
-
MD5
a91c6189344a131b50139cdc55324e93
-
SHA1
5dc8953e646cd7f45316582c752e7485ef1807c7
-
SHA256
ab165dbb17fb71005a18580484d8d3d3cc791fa0fe5fd4ff9dd6e1043b1c1483
-
SHA512
020996bd2345270332abee181ac8c7729dd092ffac60f21b53ded03c89a7189baaca953454ae7333b7d2c1b1a7cbf3d659984beeffc3296a16ef2090c322b014
-
SSDEEP
1536:B0t1tIVXK+QmlHE79W22FPeOnibQf5gsm9EzzAUerXTH/:B4/Y+7IXdeOnibQUE3AUerD/
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a91c6189344a131b50139cdc55324e93_JaffaCakes118
Files
-
a91c6189344a131b50139cdc55324e93_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 120KB - Virtual size: 120KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE