Behavioral task
behavioral1
Sample
f58dbdbf39f28d4b430c2a70a3e908c1_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
f58dbdbf39f28d4b430c2a70a3e908c1_JaffaCakes118
-
Size
784KB
-
MD5
f58dbdbf39f28d4b430c2a70a3e908c1
-
SHA1
4e580aba388116064d2f5fbb0cbb9164b5ea8e41
-
SHA256
8a69ed50dbe22d168c600048d6b03d8989d9481814e30f720e77d7b55297c3a2
-
SHA512
7059a4cf63274088193e03558ccecd36d3610c8ef26357ae4568b3841490eb26c4fa20fbd099fb8762e45fa36d59edd3690b5503debfc0da5f63c6d81e62be5f
-
SSDEEP
12288:mfdjCj6+hyLmFUJ8JvWk+L4XJsrd8ND+I9+8rNNKYt1UqUYg+wVzMqSYyK:mNChyLH8s3L4ZsU+8rNNKw1lHgPdMqN
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f58dbdbf39f28d4b430c2a70a3e908c1_JaffaCakes118
Files
-
f58dbdbf39f28d4b430c2a70a3e908c1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE