Behavioral task
behavioral1
Sample
adc9974c85429c1e23d5d36ac1d6e02a_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
adc9974c85429c1e23d5d36ac1d6e02a_JaffaCakes118
-
Size
213KB
-
MD5
adc9974c85429c1e23d5d36ac1d6e02a
-
SHA1
75478fbebc438c9e868117ad2d8566c1e01b635d
-
SHA256
c0574257aeed561ef1373d08e29142186bf69899f2f57f3504ba4281c366e426
-
SHA512
6fc680c7db3cd34ef2176b26c61cf4f0da2c9a70314b9b60bcb65aee5db78c34ca96b5c045dc70a359cb31910c43949c96b0cdf6e0686c46c7b13165a7eec742
-
SSDEEP
3072:mbMxd+piIuPCjIv6rEaRaYTnNAecLT7sawQoAd91RBOTcD8aF4maYoCcy1HsWpS7:oMxKiIIyreYTnaHLgYEHaRaK1Mdvcy
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource adc9974c85429c1e23d5d36ac1d6e02a_JaffaCakes118
Files
-
adc9974c85429c1e23d5d36ac1d6e02a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 364KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 204KB - Virtual size: 208KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE