Behavioral task
behavioral1
Sample
0a5cd0aba4fd7d7c5f276ffc9cd7e9b8_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
0a5cd0aba4fd7d7c5f276ffc9cd7e9b8_JaffaCakes118
-
Size
70KB
-
MD5
0a5cd0aba4fd7d7c5f276ffc9cd7e9b8
-
SHA1
da76c86ed5a5bfe42e60d95b9701e25da1be98a9
-
SHA256
5485763b357f7bc8fa1f143d11f8269e79696ef58896174b0a697acf2eca5405
-
SHA512
ac83b6e20d8623c6d9ca7a5bcf7c3ce700afcf4952b416133147778bc355650d3fefc8fdc70fe328b15b659dfe526b4438b9a2abf5715d6c7dca8cc08bb0e32e
-
SSDEEP
1536:zJg1ORcrxuhXD5sKqOG9zkRTtAQmR6gu3X1XF:zJlRcrxY57qOdC6gu
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0a5cd0aba4fd7d7c5f276ffc9cd7e9b8_JaffaCakes118
Files
-
0a5cd0aba4fd7d7c5f276ffc9cd7e9b8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 28KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE