Behavioral task
behavioral1
Sample
ac20fe9a97b51cec0a0605fda3c2714b_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
ac20fe9a97b51cec0a0605fda3c2714b_JaffaCakes118
-
Size
340KB
-
MD5
ac20fe9a97b51cec0a0605fda3c2714b
-
SHA1
42a958999214e37e6914e521e786be48db7c2c90
-
SHA256
31a9470c31e43588972977cccc684160a7fb448ee3a58c0ae4694ac64c27920a
-
SHA512
98fb223459b506d03aa865f2db537df7d32c0dcf74f04de18781dd644845ce311a371539e18a552cf5a7d3a48b57cea7361689c69d40c144e89143451e13cf97
-
SSDEEP
6144:SKkXbqmzDS20z2R2Us4C19xkrWpsD9W5aKcdIdr9a0q9rFMmObzEH1t:SKcqmfS/z2W4yiiKpWq0pqQmObzE
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ac20fe9a97b51cec0a0605fda3c2714b_JaffaCakes118
Files
-
ac20fe9a97b51cec0a0605fda3c2714b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 252KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 333KB - Virtual size: 336KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE