Behavioral task
behavioral1
Sample
abd958d21ccc69c1133d44f18d9dd7e8_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
abd958d21ccc69c1133d44f18d9dd7e8_JaffaCakes118
-
Size
784KB
-
MD5
abd958d21ccc69c1133d44f18d9dd7e8
-
SHA1
afb587d2ecaab64f062eebae8eb6565455a40db2
-
SHA256
fd4838f64ede4051054d136a1cbc2432a227f01f5d434b108bb0b8cb8a9868e1
-
SHA512
e9c1d2e66fdc2eb0e8795810bc3a59f231335f775a0396c0389d4ad25d00c8cd1ae504cdef6eb3faa6a005cc151f630afe92e8a0a13b5198768877a5a600e36c
-
SSDEEP
24576:h7M1zgxraSGwxmZ0JFc3rk9PN9Stgl6abh4qhqK:SAzxW73Y9PN9S5abeK
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource abd958d21ccc69c1133d44f18d9dd7e8_JaffaCakes118
Files
-
abd958d21ccc69c1133d44f18d9dd7e8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE