Behavioral task
behavioral1
Sample
aa0e88005d8831a74775368a51c29ce6_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
aa0e88005d8831a74775368a51c29ce6_JaffaCakes118
-
Size
193KB
-
MD5
aa0e88005d8831a74775368a51c29ce6
-
SHA1
7fdd45668f97863eeeebbd94b3a152fdf0af4a13
-
SHA256
2fc5b07633d1693c523048bb357c38c800b7f39ffc93d0e35dcc069c0aec8d89
-
SHA512
5abf2b572d4f4de3c2ea73778f11eb76d46785094c7016f28a2a363f5880fb043df3e5810f3ae1b2c0ba612933504b699ee5f14fcd24455c5ece9eaada9040f3
-
SSDEEP
3072:nT6M7JbvZXRlNOJhHT9SiV4UKwMJ+w7LVTs9wuugMiBY/tGjhogCvCoutjF:nThZvZhlNGTkVUqILwuug39jWgToSJ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aa0e88005d8831a74775368a51c29ce6_JaffaCakes118
Files
-
aa0e88005d8831a74775368a51c29ce6_JaffaCakes118.exe windows:8 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 224KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 188KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE