Behavioral task
behavioral1
Sample
adbe4cbe15dc8ff5bf80570e58996c9a_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
adbe4cbe15dc8ff5bf80570e58996c9a_JaffaCakes118
-
Size
784KB
-
MD5
adbe4cbe15dc8ff5bf80570e58996c9a
-
SHA1
4ddcca92b7026eb349c379419c3afca5812012b4
-
SHA256
6b4379af4f61e57c43a140e4cf64089e9a0916b11dc97fbfc35051dd795ccd59
-
SHA512
89d39b4bba8dcd90371926b41ab7b7022b9be7c232e5e726d4760aef1323cc697393fc70fe11c972397a1c474611cf367a10986862293caf8898a55bd87c5e0e
-
SSDEEP
24576:IrNdnYICKGav4onsyMJeMeMnL5KWw0vrgB:IrPY/avrn752KNm
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource adbe4cbe15dc8ff5bf80570e58996c9a_JaffaCakes118
Files
-
adbe4cbe15dc8ff5bf80570e58996c9a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE