Behavioral task
behavioral1
Sample
aa2497e9521cb84ae30b8d89d517768a_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
aa2497e9521cb84ae30b8d89d517768a_JaffaCakes118
-
Size
354KB
-
MD5
aa2497e9521cb84ae30b8d89d517768a
-
SHA1
37e50169b3150fbe64edaf9058a271e3aa62cbb5
-
SHA256
8d522f6c1d342650c7c966026a1b847820d9480e016834efebe835716166a531
-
SHA512
60169a15ad3dd4ff93f9f8188701183a77ab24b3a2cbee97ec7477442b4bd0c6d4aa02770f8a9912614da34e98921196c8bd389d04f351ce321f8dcdba79454b
-
SSDEEP
6144:zGBNXQ0i6AdPm1UXfONEM1xufHfdxBujDniSb1g7IAX6vGy5muaUT7H/mNSmFvq3:oNXQ09LOKufFxpW+y5muaK8S/
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aa2497e9521cb84ae30b8d89d517768a_JaffaCakes118
Files
-
aa2497e9521cb84ae30b8d89d517768a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
. Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA