Behavioral task
behavioral1
Sample
adfb06d1b16cc2577435457f5493293f_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
adfb06d1b16cc2577435457f5493293f_JaffaCakes118
-
Size
133KB
-
MD5
adfb06d1b16cc2577435457f5493293f
-
SHA1
3c8544db2da1e26a7025d593e93b5d22ac71090b
-
SHA256
04acc260bd43f2f0cbff3f2ba7bdc82d958152bf7c8b9b06ca06b9ec5e0e5f51
-
SHA512
08c363681656a0d6ab306db1010a05d20c206b567ce1bc870b2175cb657635c44e8defe3455cd3cd29729eb398f7a456017b54cb345bee5a4f1267dd5f87af35
-
SSDEEP
3072:iA0AXKCK1T9jvh+teFqM9VeXxwgepciHLPyMLKeqM0LV8tQ:FZnK1TVvh+UF3DiDQrPyMLxWWQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource adfb06d1b16cc2577435457f5493293f_JaffaCakes118
Files
-
adfb06d1b16cc2577435457f5493293f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE