Behavioral task
behavioral1
Sample
a9b12d3fe7371309b02129625668b70c_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
a9b12d3fe7371309b02129625668b70c_JaffaCakes118
-
Size
4.0MB
-
MD5
a9b12d3fe7371309b02129625668b70c
-
SHA1
44ef3532a883a5fc7716d473f6d0152a9a7739c8
-
SHA256
49d809bc6342988191707c060279fea8b730ffeaad0de84a3ec8e6960b8fadff
-
SHA512
e8351a0a669ed3cf5783c898cc7c5ace2eccea4964725d98f58c87eb695cbdaa70adeaa8e81975b5af8ad4aed5aba95c2cc36d03409e105a5d24ef68bbbf1640
-
SSDEEP
49152:cH1RRh3I0ITvESlx+AQR4u2ZH4/MgkQrKmnheTeZJCLTFj18NpJ5GViP/6Jl:cHT3Izl0AQR/2wfpQTECvzs5GViIl
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a9b12d3fe7371309b02129625668b70c_JaffaCakes118
Files
-
a9b12d3fe7371309b02129625668b70c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 764KB - Virtual size: 764KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 592KB - Virtual size: 596KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE