Behavioral task
behavioral1
Sample
f34034740fb83728673351b658fc79ec_JaffaCakes118.exe
Resource
win7-20240215-en
General
-
Target
f34034740fb83728673351b658fc79ec_JaffaCakes118
-
Size
784KB
-
MD5
f34034740fb83728673351b658fc79ec
-
SHA1
01f1ce0c8b93a3824db244f82a64f14f3fbd8114
-
SHA256
899594ca02c9ca55e93b952d907cf24fdcf64c5c95531f72ac5cca954ecb26a4
-
SHA512
29f1280ff7bfb78f756f55d1ce6fe3978975ab18ad8b45577a47c7a2a2b041f2d388935f2e1c8bf9557b0f0cdc50483650440b2b718594f7154ef03fb096c446
-
SSDEEP
12288:yGFGaKbWTCkM/3oqGW8Um1P0sfnh9ZqB/G7ZsxlRLrH+T8yt+cZwMfHXDXZ4+RYi:yGmbJGU4PnZ9Ue7ZcvrHEDZZHzZ4+t
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f34034740fb83728673351b658fc79ec_JaffaCakes118
Files
-
f34034740fb83728673351b658fc79ec_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE