Behavioral task
behavioral1
Sample
ac78835953009189223a76ffe69c0ce6_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
ac78835953009189223a76ffe69c0ce6_JaffaCakes118
-
Size
179KB
-
MD5
ac78835953009189223a76ffe69c0ce6
-
SHA1
05d58d82d17e3f297e181b1a0a3f808b77251e5e
-
SHA256
f6073cf6bad994465cdba9125c89760b6b4a1843be8a437d343184e248e0cfa3
-
SHA512
82a67eb738478dc5693684ecac8fba111dbd80b7e7bbf878865ed25bdc0a83606cc198c2d3c9f606f15ca01ad235abf6721889c68ac00fa1da6fa2a7bd741b8c
-
SSDEEP
3072:jxJoLOJsw3DMXLRhtrnrwYLYYm0DtFJpoxn6fg43KSlvUhhfxwRFuyuTEouh:jH1RMdrUYdmWkn64Qwhxxw6Koy
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ac78835953009189223a76ffe69c0ce6_JaffaCakes118
Files
-
ac78835953009189223a76ffe69c0ce6_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 300KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 177KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE