Behavioral task
behavioral1
Sample
00d417479f639abccbd4db7b1f638c35_JaffaCakes118.exe
Resource
win7-20240220-en
General
-
Target
00d417479f639abccbd4db7b1f638c35_JaffaCakes118
-
Size
6.8MB
-
MD5
00d417479f639abccbd4db7b1f638c35
-
SHA1
4dc23781eb9f842da5c467f5c0d44e0961d81393
-
SHA256
2a034b48adea5f00dec9d4d95acc643829fa714994daa8df0a0fb3394b0cf920
-
SHA512
26b322a3d9d8f1bd50dd17e94ed0f993d54972f94c89f56245a75dedd4cd3457c76d88968955e065ed3c7e02828649af15a31ee3186d4c514b888e26e6cd80e2
-
SSDEEP
98304:2DNDjjf5GZWcJDtQs7W2z3eqz12trND8TL7Hl7BUbT:8/gZWcJWs73Oqp2libHlVU3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 00d417479f639abccbd4db7b1f638c35_JaffaCakes118
Files
-
00d417479f639abccbd4db7b1f638c35_JaffaCakes118.exe windows:4 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 8.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4.3MB - Virtual size: 4.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE