Behavioral task
behavioral1
Sample
aa7c9ed49e05bf6ea4016cc897bddc26_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
aa7c9ed49e05bf6ea4016cc897bddc26_JaffaCakes118
-
Size
784KB
-
MD5
aa7c9ed49e05bf6ea4016cc897bddc26
-
SHA1
638ef599fbb73c32fe03827519f37578176dc8ed
-
SHA256
bbdca09640d4320eb94babbcac093b07aa4bbdb438e2d7be65c0dcd387d9c904
-
SHA512
b80a275414448bcd4cee4c87b285a68bf9f6755bfa7907d443ffefec4d790c122ef596cd8c6f0150da5e59cf9a956a8331617a462cdfea5d092209a9a014bb27
-
SSDEEP
24576:bsTprCBQQUCT8ybDtt5Us38Mdtgtvmc17jR8lAu6:bcrCB6CT3bDtkg8MdKhm2vRm/
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aa7c9ed49e05bf6ea4016cc897bddc26_JaffaCakes118
Files
-
aa7c9ed49e05bf6ea4016cc897bddc26_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE