Behavioral task
behavioral1
Sample
abde405081ff2322292c93ec68db0452_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
abde405081ff2322292c93ec68db0452_JaffaCakes118
-
Size
97KB
-
MD5
abde405081ff2322292c93ec68db0452
-
SHA1
ab433257b0f88c5d1f9ca4e6590d93ed90b06672
-
SHA256
421b022192227819d8036b92e3e408df60fa0784e3d66a0d465eda4f98101064
-
SHA512
da110f3b68fa2b117b19ea7c08d47ce2e03347354b55ee97800a4785e7992778934430628240e99484a9cf4b5a10848652836df430017cfeaf32fb9d0aa0f4cd
-
SSDEEP
3072:2hettB2r+14x2GPiIKm+xVuidC1QdSUed5j:2wPErRx2kd0UOPe/
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource abde405081ff2322292c93ec68db0452_JaffaCakes118
Files
-
abde405081ff2322292c93ec68db0452_JaffaCakes118.exe windows:10 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 136KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 129KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE