Behavioral task
behavioral1
Sample
f7d85edf75f02759df37e5906bda4db9_JaffaCakes118.exe
Resource
win7-20231129-en
General
-
Target
f7d85edf75f02759df37e5906bda4db9_JaffaCakes118
-
Size
784KB
-
MD5
f7d85edf75f02759df37e5906bda4db9
-
SHA1
bb61f8d2c23ab861ffe183002fbeda038c12d289
-
SHA256
1ea42950e28e5a3924d3ed085b5db9299be2ffd343beea348f91152848ffc182
-
SHA512
63a89a1b9a79e8fbb6caf7e2320237d5be0d3bf71175258474401d531d745d5a497a38f625c0481b3af984746e3cef02ab7539ad1e920dcd84fb959e90e2c89c
-
SSDEEP
24576:orsLHCXCUNoysBi5BAS3NhqnH1pc85wdjRcCQ:orMHCXroysBi5B1OtSUCQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f7d85edf75f02759df37e5906bda4db9_JaffaCakes118
Files
-
f7d85edf75f02759df37e5906bda4db9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE