Behavioral task
behavioral1
Sample
ae13ab995ed2cb8963d5b7c69269855a_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
ae13ab995ed2cb8963d5b7c69269855a_JaffaCakes118
-
Size
118KB
-
MD5
ae13ab995ed2cb8963d5b7c69269855a
-
SHA1
ba8ffda409d5b8a0ebc704c041f870dba736b24b
-
SHA256
3d31d7c4fc944cfefcb7320c14b44940c34b5bf3435c79dd8347438d46b67865
-
SHA512
669edb8d83784a53b58db4be79ae7ce72e68ba655f87b48b6d15599b1d8d826dfe0fab9709e802fec53866d35522f0063a70f2591559139923a011d414ffbfd8
-
SSDEEP
3072:twV4OgSzBmV0XeZFkz3Rr0/kij9Tf895bomd4vY:tMzzMMGFkzhr0sij9o95DV
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ae13ab995ed2cb8963d5b7c69269855a_JaffaCakes118
Files
-
ae13ab995ed2cb8963d5b7c69269855a_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 232KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 73KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 63KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE