Behavioral task
behavioral1
Sample
ac01b8ca5eab83c8bc2607af39ff3c26_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
ac01b8ca5eab83c8bc2607af39ff3c26_JaffaCakes118
-
Size
784KB
-
MD5
ac01b8ca5eab83c8bc2607af39ff3c26
-
SHA1
2b6ef1ecd2780ce80d576a9753aa7c5b6ce97b34
-
SHA256
7d167c069764299f6476dbd77cc3671fb01570940096cfad69eb0fdc387f76dd
-
SHA512
51e9dd388f04d85098e8b798f44e90281885f313bd543656fb27061f9de0228ad6096f5b655fdb7946bee49a67efc44798e6ba305dcb50ca25f422db61c6a285
-
SSDEEP
24576:ZaPBf3F68CHZ3nqliTbjaWHuMgMbFO/eZ4hfy6:gPh0ZnlOMSMU/eZU
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ac01b8ca5eab83c8bc2607af39ff3c26_JaffaCakes118
Files
-
ac01b8ca5eab83c8bc2607af39ff3c26_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE