Behavioral task
behavioral1
Sample
aa8ec9024cb08ca3dafa5bac1c2e446b_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
aa8ec9024cb08ca3dafa5bac1c2e446b_JaffaCakes118
-
Size
1.5MB
-
MD5
aa8ec9024cb08ca3dafa5bac1c2e446b
-
SHA1
13e5c4fdd6d1b0da7b1404ef6364bcb1c3a45d97
-
SHA256
fac47bbf8936fe8f972eeecff2ad0343063297b04ada04b09e9d3cf87dc20a2e
-
SHA512
f8c3df4feaa3697480258d2d6f383a318a630ce82ebb33d758ec5febed3f122042550f6a39f7d7290829394b4f32e90da70454d111592e29c084f0288b00ba5f
-
SSDEEP
24576:11Wi1DzlSNZ3iDZNWR3WxZChLNK/0236AgOg:11DZUv3WG/KNg
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aa8ec9024cb08ca3dafa5bac1c2e446b_JaffaCakes118
Files
-
aa8ec9024cb08ca3dafa5bac1c2e446b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 828KB - Virtual size: 828KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 632KB - Virtual size: 632KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 37KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE