Behavioral task
behavioral1
Sample
ab4a3b958ed7587c326d40ceac7fa395_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
ab4a3b958ed7587c326d40ceac7fa395_JaffaCakes118
-
Size
4.4MB
-
MD5
ab4a3b958ed7587c326d40ceac7fa395
-
SHA1
6b68e9fc485ac0b6be3fc5227824f1792dd4e879
-
SHA256
b6cedf983edf4c850af49d581e5cca49b2253d2eb1fe99723f6369698d6ab097
-
SHA512
c66411accd03131cf85e435a041f5309736d99d12445b6022ce89638c3e8164a73ea237f17e06b90a2857c84d7ee97d35d98d5a06edab1dfd0a6e8ee8cd888b1
-
SSDEEP
98304:WRL8Yq5fQ8uK59LjZl8iVBoaecfi5JOM:WtufQ8j5hZl5E3suAM
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ab4a3b958ed7587c326d40ceac7fa395_JaffaCakes118
Files
-
ab4a3b958ed7587c326d40ceac7fa395_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4.4MB - Virtual size: 4.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE