Behavioral task
behavioral1
Sample
ad4ae00a4a4593eb59fed451a6e81f00_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
ad4ae00a4a4593eb59fed451a6e81f00_JaffaCakes118
-
Size
239KB
-
MD5
ad4ae00a4a4593eb59fed451a6e81f00
-
SHA1
4fa57d565ad8844bb9ea59786a4c456b6a52c810
-
SHA256
2b4b6f245c8ba0b25dffe6f95460ad8d0b5c1916eddf6e4c8d0f4a819ede374e
-
SHA512
70b42b5300c03df77c1eef30665a9cac1a8e35ac242477413a8ac7e12767442bc68a25b2c9d9ac70d10569591385738473f8a58a2d6e6599229c850fc1fc3601
-
SSDEEP
6144:4iS2oSQsE2L2oHax7BvntUKy+YzuVCNKgAYIv:RS2oSc2deVtJyp4C4gAYS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ad4ae00a4a4593eb59fed451a6e81f00_JaffaCakes118
Files
-
ad4ae00a4a4593eb59fed451a6e81f00_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 84KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rcdata Size: 204KB - Virtual size: 208KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA