Behavioral task
behavioral1
Sample
a938fd9c5b5b38d904db9a50740078d5_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
a938fd9c5b5b38d904db9a50740078d5_JaffaCakes118
-
Size
784KB
-
MD5
a938fd9c5b5b38d904db9a50740078d5
-
SHA1
49203fdd1c1988217b3d9ed11fe8101c3f266e00
-
SHA256
93479c1e8799032eadf0c93ea65da07b16a2a17f52e75e4ef1ff58aca86f67f2
-
SHA512
8498247b22249a0cc7f92ebe3f655d2f8de06c08469fac437e238777202486fd19b2f234f1263c2e80b4ba5ee284192f400ee212f314ed3f20fc71fb3f61e3f6
-
SSDEEP
24576:mVhydNuoIxG0BD7BrJEOlbsM3UyOq3N2AyOu:S4d6xbBNrJLlbcw2AyOu
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a938fd9c5b5b38d904db9a50740078d5_JaffaCakes118
Files
-
a938fd9c5b5b38d904db9a50740078d5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE