Behavioral task
behavioral1
Sample
699bbadf827d66778c4e0f51e985bae1_JaffaCakes118.exe
Resource
win7-20240220-en
General
-
Target
699bbadf827d66778c4e0f51e985bae1_JaffaCakes118
-
Size
7.4MB
-
MD5
699bbadf827d66778c4e0f51e985bae1
-
SHA1
c56ba02f7bd32d2d398e36fcc4dc3fe079a4290b
-
SHA256
9daff4019d458ec776f9932dbd904790f93bb9a31b2f39b64c9a1bda162d36b9
-
SHA512
b969488cc184e99002db4598a3f1f87f6ff8e312ed66bb9a07873984913b0ac25d2ebaaddc53bab1f246bf357d1b47ecb6300c3d8736b7ee8d06c6ee5121b728
-
SSDEEP
196608:M0zbJSSs81qf6vM5q/B9sJexSY2f+A33IrJvNn1C1np9DWl:fzbg1ghEq9rfA3iNQnp9Di
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 699bbadf827d66778c4e0f51e985bae1_JaffaCakes118
Files
-
699bbadf827d66778c4e0f51e985bae1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 180KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 61KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 91KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE