Behavioral task
behavioral1
Sample
aeb601e66447a050f268b9c44773483d_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
aeb601e66447a050f268b9c44773483d_JaffaCakes118
-
Size
224KB
-
MD5
aeb601e66447a050f268b9c44773483d
-
SHA1
402fc18cfc13aec78b5260ed5e0f6672662c0201
-
SHA256
06d1923a257c8d6bfe574f30d209261a042cdfeb3e43ca2c36cbfe1af8ee26f4
-
SHA512
bdaa1cddd19dc497e1010355fd8be3b059cd472c118ddf23febef5ffee7532e1356f7c55c1d16b3422d78c13c97f036dc8d31c2f9c22a624f27ec492ecbbac01
-
SSDEEP
3072:MX+9Qmuy8wCWUuhzEeKNxNyDmYkUVj9YZQY9J2e11HjRl3h0miD39hYFtCMX/3Oa:Y+7fGe0yQYj9MQe7bhBFsm/36eoSBN
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aeb601e66447a050f268b9c44773483d_JaffaCakes118
Files
-
aeb601e66447a050f268b9c44773483d_JaffaCakes118.exe windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 92KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 219KB - Virtual size: 220KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE