Behavioral task
behavioral1
Sample
a9cf35dbe07192a7726bdc6dd1b0cf75_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
a9cf35dbe07192a7726bdc6dd1b0cf75_JaffaCakes118
-
Size
60KB
-
MD5
a9cf35dbe07192a7726bdc6dd1b0cf75
-
SHA1
dcf143962ea9a5ddeba8d7b6d7e1a74bc880a75b
-
SHA256
306c0a24a80cdec457c270b881f7e5950dedd727cd7bf78bae1f5dc6481c1bc3
-
SHA512
9f3cb879e69e7b49e5f2e60382fa2233f2f42e21b36f003baef57b3baa412a3d4c27858a6ce431809e263814a904d91a3c66d74a9316651f90f8b9aac167073a
-
SSDEEP
1536:UP9XGxnGcQeO25YMERx1FtIrilaCyR5wvcsVJDBTfqhAx:UP5GE5eO25YMELZRyIUsVlBbH
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a9cf35dbe07192a7726bdc6dd1b0cf75_JaffaCakes118
Files
-
a9cf35dbe07192a7726bdc6dd1b0cf75_JaffaCakes118.exe windows:4 windows x86 arch:x86
f9ade0aa18f660a34a4fa23392e21838
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
Sections
UPX0 Size: 59KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE