Behavioral task
behavioral1
Sample
ac90b6bf3f998d644a53a88df4f4961d_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
ac90b6bf3f998d644a53a88df4f4961d_JaffaCakes118
-
Size
784KB
-
MD5
ac90b6bf3f998d644a53a88df4f4961d
-
SHA1
ed5623c4b667a714b6aee30a173d1a337ebe56af
-
SHA256
7a89c50733e4f2438017f3ccb25b5d8b7388b62b54f65142f950fdadb83f8b8c
-
SHA512
2c0af209e3c5429f91f74b0530f4b3977d671a86c00c51d4a3eb4c77640e9456c6628a41c8372b787e80461d1932fbe19e03c5c9119e15f3cbeb77159c1038e7
-
SSDEEP
24576:Xzhv++saYxxJgki+iIrQbSS0YgBS9g/JzDPOy4cJj:YoYxXgkiWQj5gBS6/JGyj
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ac90b6bf3f998d644a53a88df4f4961d_JaffaCakes118
Files
-
ac90b6bf3f998d644a53a88df4f4961d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE