Behavioral task
behavioral1
Sample
a9cc9a809945f3c4dd8a0ca6f8a7682b_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
a9cc9a809945f3c4dd8a0ca6f8a7682b_JaffaCakes118
-
Size
49KB
-
MD5
a9cc9a809945f3c4dd8a0ca6f8a7682b
-
SHA1
fdcca7d4604b484f4b3fa7121d332f89bda50714
-
SHA256
240b822c73368a7682b2bed508933ad1d9c8a6ab46c4858c5c43c1a8bfece5d9
-
SHA512
10da47dbffffa9c2392b6734f0eef0f021a400e0f8e5ff7826db8804a0cc056c2e3d33625433a7e2e86c0c5ab0b637547e0e0ab34fff2ee0b2c7052764f04d91
-
SSDEEP
768:86dIsVk6LcoUd9/NxhEtXbCHIXofP2/uWm9gqo9DUizjlJVgtEyLcAK:86dIanqn3hYX0I432/MoWwZ4eAK
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a9cc9a809945f3c4dd8a0ca6f8a7682b_JaffaCakes118
Files
-
a9cc9a809945f3c4dd8a0ca6f8a7682b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 48KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE