Behavioral task
behavioral1
Sample
a9da46e53d0543298dccd0e6d12930aa_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
a9da46e53d0543298dccd0e6d12930aa_JaffaCakes118
-
Size
522KB
-
MD5
a9da46e53d0543298dccd0e6d12930aa
-
SHA1
cedda80c137d2e38a32f8a43d1e4a64f723e3edc
-
SHA256
8e5be987db523ad71820cf7e1dd7f172278df2fc6941cc205e7a222c94ccfd77
-
SHA512
2d66c545c682d841d55983ab099d42ebc885ab876f1b8f12c0329e80fade3ce28aebe58cca54fa604214d5c64110dcb8900e570ba47c722a54cec0187afbe9af
-
SSDEEP
12288:+ZUuLe5/JtvB1Y3DVlTHk1d8uzjvVLGmm8O:+ZDLe5hpByHumufvVqb8O
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a9da46e53d0543298dccd0e6d12930aa_JaffaCakes118
Files
-
a9da46e53d0543298dccd0e6d12930aa_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 505KB - Virtual size: 508KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE