Behavioral task
behavioral1
Sample
ab39e0e1a8796d3f0d4ba95d6b5956ff_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
ab39e0e1a8796d3f0d4ba95d6b5956ff_JaffaCakes118
-
Size
784KB
-
MD5
ab39e0e1a8796d3f0d4ba95d6b5956ff
-
SHA1
c2e40409e41e89fc73c993b0bc94f03fe6dd56ed
-
SHA256
db40a81bd36f233fc9fcd54e69771fef6146cd033d91722c250aab8bf2696216
-
SHA512
56aaa9001bf7eae149e4a7e8586c7fab0853730d030d63157d0bbe296668624c3991522175bdd7093257d45b16a542e30447579978c68d222c4598a812084dcf
-
SSDEEP
24576:oqbCdaiS+QrLXYx+9rA05XaKorTc3fA4O:oYCdaV+QrLXYx+9AGy0D
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ab39e0e1a8796d3f0d4ba95d6b5956ff_JaffaCakes118
Files
-
ab39e0e1a8796d3f0d4ba95d6b5956ff_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE