Behavioral task
behavioral1
Sample
1001ef4f51b6c97625a85075789a6004_JaffaCakes118.exe
Resource
win7-20240611-en
General
-
Target
1001ef4f51b6c97625a85075789a6004_JaffaCakes118
-
Size
784KB
-
MD5
1001ef4f51b6c97625a85075789a6004
-
SHA1
de3cd7caa829d081dc5912d566a2b2cc2e144816
-
SHA256
f30a4251ae80c9c4f3059aa6795c3782a15fb3d99d75122ee08e2f68cb70cdbb
-
SHA512
bf2148962717ca7696282d1b1957cddd3572c79abb286a118ed6cea5e921dcd2c7edd2605edc8c63c0ed9bd551a91fcdba57adccd532e0cfee8ae511313b49fc
-
SSDEEP
12288:Sc913Wwy49E2Klg4B0APPFkks1S3+SEVMJWtXEMDFww9Uo3oMREF2EJpD+47cy+v:Lrenlzz8SgMJWtUMr9SE02yCL
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1001ef4f51b6c97625a85075789a6004_JaffaCakes118
Files
-
1001ef4f51b6c97625a85075789a6004_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE