Behavioral task
behavioral1
Sample
ab3770fda03ee878f5fca6cda43fbf34_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
ab3770fda03ee878f5fca6cda43fbf34_JaffaCakes118
-
Size
234KB
-
MD5
ab3770fda03ee878f5fca6cda43fbf34
-
SHA1
b6a473687d92a4107484e470f58e0ece790522fd
-
SHA256
5271a1fc9a8558e931872b466469d18087bfa106dd258b78a67d7cb6a4d2fb6f
-
SHA512
525b2bd556fb8aebc3fdf76b080190719ad25c4f5ecd1be450d6249b47692968b820680fd85238d51c0ebd5a485f45cc501cc0ebdc68aecc8ce23297bcb3b883
-
SSDEEP
3072:xwLvab9GHsJ/TVhQo/Lsdt9sl7Rxh7xc+6zY2wt:3bAHshTrQo/Ct+RT7B
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ab3770fda03ee878f5fca6cda43fbf34_JaffaCakes118
Files
-
ab3770fda03ee878f5fca6cda43fbf34_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 248KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 47KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 49KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
oodyrax Size: 98KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wdzsnwy Size: 4KB - Virtual size: 72KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE