Behavioral task
behavioral1
Sample
a9d0a47f945d970877a41f26a79a50f7_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
a9d0a47f945d970877a41f26a79a50f7_JaffaCakes118
-
Size
141KB
-
MD5
a9d0a47f945d970877a41f26a79a50f7
-
SHA1
75e5e0b787da603eff8084d810a207b6aba3c5ac
-
SHA256
077bfafcd8df6d2e1e3150b4370f07fa2fc5a28a6c894db13e8a54a964e7e8bd
-
SHA512
58da308684c224f9d9a50b920eda61d69fa55f1ae5fbd43355b3f8f54ee8574dba722e60fbb9214aca0a0c14aa3d88f515ef26030f9a5883b71d605621305fea
-
SSDEEP
3072:wWXQ9WQzyZQiXL1SmdR5zlD2kgh9OUmT4veAM8FFu27qIoutr:wWA9yXL1SsR5daiUiweAMkX7loS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a9d0a47f945d970877a41f26a79a50f7_JaffaCakes118
Files
-
a9d0a47f945d970877a41f26a79a50f7_JaffaCakes118.exe windows:8 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 137KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE