Behavioral task
behavioral1
Sample
ad3a3195d4f5f8ad24fb03eaf93760ca_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
ad3a3195d4f5f8ad24fb03eaf93760ca_JaffaCakes118
-
Size
1.9MB
-
MD5
ad3a3195d4f5f8ad24fb03eaf93760ca
-
SHA1
03221312096cc0cc07286a98249da2223e758c82
-
SHA256
4572cafa1d96fdf9708ba9be69685ca02b1c047c202aea6a31c85164e7d90857
-
SHA512
29ea5dfd6f0016a232f0922f30316c229f584d1725113293e9030084c2dd8632286ddfab684701dbc93c30a62ef4487fb6b6e40c25b2222e56c32df4a317047e
-
SSDEEP
49152:bdRiGdYUXxBEZhLDruzyTE/dgCTqoWH8NrkqVovOlGIWrB7q:bsUYruGYB8yr3VoWlGIWrBO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ad3a3195d4f5f8ad24fb03eaf93760ca_JaffaCakes118
Files
-
ad3a3195d4f5f8ad24fb03eaf93760ca_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 196KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 105KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE