Behavioral task
behavioral1
Sample
07499cb7940b5a3aa6407d1f8fda8158_JaffaCakes118.exe
Resource
win7-20240419-en
General
-
Target
07499cb7940b5a3aa6407d1f8fda8158_JaffaCakes118
-
Size
668KB
-
MD5
07499cb7940b5a3aa6407d1f8fda8158
-
SHA1
3bcdeaae163b7b5ee02e9a696fe4e656d4f33a33
-
SHA256
e0c01770fe44b445504eca34770251cb84f2c94ac6e3945334cc879f0aa5f5c8
-
SHA512
d25a7f3c8b6f7ec61b5bf42a821122cf2268ef48a87902b68803dda7c29aaf3ad96cf6b839990e9b471ff4926dbf953ea4a9b15e474e4caeb20b6be6978abbc5
-
SSDEEP
12288:Aa268qgPTFE1QzqxMES+GYPnBGPwD3PEuNl4tsctmDd8w89cWvRFRUBDmtM2zI:A368PxE1QmQ+gwDfEuD4tsymB8w87umy
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 07499cb7940b5a3aa6407d1f8fda8158_JaffaCakes118
Files
-
07499cb7940b5a3aa6407d1f8fda8158_JaffaCakes118.exe windows:4 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 638KB - Virtual size: 640KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE