Behavioral task
behavioral1
Sample
ab53814a9d1e2d969e8ec3e8bf63beee_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
ab53814a9d1e2d969e8ec3e8bf63beee_JaffaCakes118
-
Size
128KB
-
MD5
ab53814a9d1e2d969e8ec3e8bf63beee
-
SHA1
20d81099d41f2a192cc2099f863b94d515bb4e7e
-
SHA256
1aef4a5d9ceb6c643158857161a869e8e1e5e4405be95b1b1db6ab276935e45d
-
SHA512
0aafc2d89316a81ed5d6b3826bcd49624214fbcfeb54b4db12034a38fedee7d8e424b666814441d76d3b0a5545f4cd2e87c8cc6b312344236ce24a508c24c857
-
SSDEEP
1536:1nNMjfFfuE0KFhCSmrTV1TQkr5MG3wxVZakPaRXyml/NCywzJBLWgmHbOGHG+1wp:bM5fRhqTuGkVqRBl/NCyJm+mhD
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ab53814a9d1e2d969e8ec3e8bf63beee_JaffaCakes118
Files
-
ab53814a9d1e2d969e8ec3e8bf63beee_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 388KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 66KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE