Behavioral task
behavioral1
Sample
abe893dd4803e3a37da10a81a6c8f34d_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
abe893dd4803e3a37da10a81a6c8f34d_JaffaCakes118
-
Size
784KB
-
MD5
abe893dd4803e3a37da10a81a6c8f34d
-
SHA1
8db00fd723cab40c517a148aad63977dc47b5a4f
-
SHA256
e1b5ac42601227d2b54769e5aa833f7740a87fc45c998e04ee64403259bd9668
-
SHA512
723b9651678acf719d348b10dea845256468293149c7ab606a0e80497cf94755fc6ed74cf9958a71de82ce16d675293a2b88c5e4460332e308384e418bfa0dd3
-
SSDEEP
12288:1CTZGwTBuPaMs0uZ+Hl87hwkb+flRtbjIz5PGuAh4Q3V7+YNEUYqoLKy:iGwT8aZ+HG9b6BbjoPGFaQFKYNcLKy
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource abe893dd4803e3a37da10a81a6c8f34d_JaffaCakes118
Files
-
abe893dd4803e3a37da10a81a6c8f34d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE