Behavioral task
behavioral1
Sample
aa7cf150e337dc38ec0385c02c93da9a_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
aa7cf150e337dc38ec0385c02c93da9a_JaffaCakes118
-
Size
3.9MB
-
MD5
aa7cf150e337dc38ec0385c02c93da9a
-
SHA1
814ad92fadc1a0285a71d5a1e256653ca7d40062
-
SHA256
3bd0775f46eb566f23fc3ecaa87ba15d96c88194accbd9c7d0c1fb51cc02a9e1
-
SHA512
98f4b20af368fc2e43b9000e5a6aab61d6051c82a65e2f68cbee69e192aca2b39444e1f60d7a25bc8faa2454a89d0dc41142728c63749d4ca0ee80c5dc9869d0
-
SSDEEP
98304:t168O3PrsMLDMGp7hkjuAo5uzbmzg4nJU07hkjuAo5u9AFELjw0A/X6cG7hkjuAr:t16xfQMLDMU7Gfo50m8Q607Gfo5L4u/W
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aa7cf150e337dc38ec0385c02c93da9a_JaffaCakes118
Files
-
aa7cf150e337dc38ec0385c02c93da9a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE