Behavioral task
behavioral1
Sample
23ba787993deb5290d2aba1134bfc66c_JaffaCakes118.exe
Resource
win7-20231129-en
General
-
Target
23ba787993deb5290d2aba1134bfc66c_JaffaCakes118
-
Size
7.1MB
-
MD5
23ba787993deb5290d2aba1134bfc66c
-
SHA1
4b2076ec7178dfd4b9d89716c01c2f58e7f660f2
-
SHA256
2f7af3e4197e205f79c54347d369365e1c1a5566cdbb127b49e94cb1c0f6e74e
-
SHA512
a3db962f86ae2e5611afef60960129f0af3357b689d25d8049ce4a7e087138967558dbfc981399f794c4947ff0d3461c950ffdd8d8ac3eaa7efde4ddc13c8cdf
-
SSDEEP
196608:Me6P9aFJFoPveiLSEVXSa+V6WlTUXHjWx:Me6PsFJF07LSE19+V65XDWx
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 23ba787993deb5290d2aba1134bfc66c_JaffaCakes118
Files
-
23ba787993deb5290d2aba1134bfc66c_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 12.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 6.6MB - Virtual size: 6.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 513KB - Virtual size: 516KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE