Behavioral task
behavioral1
Sample
aa8d50ffc100566dcb5588cc5337a5f8_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
aa8d50ffc100566dcb5588cc5337a5f8_JaffaCakes118
-
Size
40KB
-
MD5
aa8d50ffc100566dcb5588cc5337a5f8
-
SHA1
9086ad017739562bf6464c34360ce661b053a2c7
-
SHA256
5fea77a08a5719a69155cc7e32feca407bc83ad68a8404433ac84a7b40e06f9f
-
SHA512
fdfe291aab983003350f1faddf8d27d71655395d19791d26af9b5394a592c1838638fd1353f6a6c2f8246672a1620bc3cba355d09f3e2cf43ec5395ba5e78aa6
-
SSDEEP
768:Rxl16ijK1zaimH10HU9cp/Hn9JWiP3NkmT1WDNrs81nbcuyD7U44e:Rp3jaGTH10rp1JnqrNrnouy8Ve
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aa8d50ffc100566dcb5588cc5337a5f8_JaffaCakes118
Files
-
aa8d50ffc100566dcb5588cc5337a5f8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 96KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 34KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE