Behavioral task
behavioral1
Sample
aa4ffdd952e91f726d5fdd21fa88738c_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
aa4ffdd952e91f726d5fdd21fa88738c_JaffaCakes118
-
Size
462KB
-
MD5
aa4ffdd952e91f726d5fdd21fa88738c
-
SHA1
760ddc43b38f7e5e67c820a2acd13ea8c2d04f74
-
SHA256
e9127cac8cc7410f8afa515f29b37502377a0721a98a5b1407648f1ee27a987b
-
SHA512
f6c50a8ab815368b8b933efd5002e8d6d6771ca6347287f0861330afc5dc4c1e0267edd7960303c158c892f8f015852c2b5774d5a7dee6abf2a73f190a8ba003
-
SSDEEP
3072:H9H81PnJI1dA1BJa5+9f7DKD9BSQcIQvZ3axn:tkvZq
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aa4ffdd952e91f726d5fdd21fa88738c_JaffaCakes118
Files
-
aa4ffdd952e91f726d5fdd21fa88738c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 360KB - Virtual size: 360KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 98KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE