Behavioral task
behavioral1
Sample
ab3e38a178526d28cd928e8da059ea1c_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
ab3e38a178526d28cd928e8da059ea1c_JaffaCakes118
-
Size
71KB
-
MD5
ab3e38a178526d28cd928e8da059ea1c
-
SHA1
e08a0df21765703a8429d60bef0fb1befec68ad5
-
SHA256
97736f09d4ecfa46f5ec78bffd1334daa13f86d7f46ed48f2e187491154e50fc
-
SHA512
22ca37ad0eba180f0d5225edceb5c8e83e70d42ec3c768aa21cfa0bed06bdd1617ad3d2aecd36c3b6ac020fb12620dec04933c78f22a526e8df429b4e76b5e8a
-
SSDEEP
1536:ha87bz7kSQ5dYSicZOXAGdWIYKF+tHjV/8D6kwb9D+Pr6R/C/g:hvX/zQgvcAXAwWHKEj6D6k+B2+Rqg
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ab3e38a178526d28cd928e8da059ea1c_JaffaCakes118
Files
-
ab3e38a178526d28cd928e8da059ea1c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 200KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 67KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE