Behavioral task
behavioral1
Sample
ad35fe0cb35e6916f9b6251218f74717_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
ad35fe0cb35e6916f9b6251218f74717_JaffaCakes118
-
Size
22KB
-
MD5
ad35fe0cb35e6916f9b6251218f74717
-
SHA1
32ddda22889bf298bf808a8484d5ef6b611e5b1e
-
SHA256
af28951db87678b38a8f8bb7e2bbf64983596bd79c428d2d6acbaf6ab99eca16
-
SHA512
24e5430bd9c20079bcf47276da2e07a78595f92e1fe1c474a005decbb667a8d08d59bfbb2c369e951cd9eccf16f06607f0349b3aa2e36c04222b4d8577e55665
-
SSDEEP
384:s8fR9OunM9XkG+zcjA7TpgvUDKSX5CaLWbp3L1ED4xt542HaNJawcudoD7U5H2q:s8flnM9UHzcjM6cDX5sdX75wnbcuyD7Q
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ad35fe0cb35e6916f9b6251218f74717_JaffaCakes118
Files
-
ad35fe0cb35e6916f9b6251218f74717_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 52KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 20KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE