Behavioral task
behavioral1
Sample
af8ed995e113f7a840a27dcb8ebbecca_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
af8ed995e113f7a840a27dcb8ebbecca_JaffaCakes118
-
Size
792KB
-
MD5
af8ed995e113f7a840a27dcb8ebbecca
-
SHA1
0eaca80abd7dea9fae1733ec7700d35b8cdca116
-
SHA256
be546fb30eed6a2d685460f62bba487494f999d7cbe1226f06d03bcbcdbea53a
-
SHA512
b3246a6729adb0ad6d4cc8fa99bc055653101cba07c0a53c550d1ef344fe997aba7546969a019c6b0e515e1d6da5ef56a077cb5a8ddac3d3464401b3455a3e68
-
SSDEEP
6144:e7OhAF1qUGceyhBf8CA6SsrhA/UK4QPUY92VzhwZ1pQ88CAnQyVo100:kO8qIe4JA6SB/r4QPUE2Vzo4MAnQX100
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource af8ed995e113f7a840a27dcb8ebbecca_JaffaCakes118
Files
-
af8ed995e113f7a840a27dcb8ebbecca_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 372KB - Virtual size: 372KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 327KB - Virtual size: 328KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE