Behavioral task
behavioral1
Sample
10478520b44cb696fc777f5ab775d29c_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
10478520b44cb696fc777f5ab775d29c_JaffaCakes118
-
Size
784KB
-
MD5
10478520b44cb696fc777f5ab775d29c
-
SHA1
6047176267103f427e9e8ef3c78cdaa042036281
-
SHA256
7029fddb396bbb4b25cf2ea0f87261aeab194f407ad08ec5e3360bbaa0207e8b
-
SHA512
22bba1ef01b8fc3442beaf400b444cf13f2592bdd0dddad972a3ff7421008c1d2b0e395af6b84c3ac63d51b8bdc2a3e2c408066b8abf54a0b3ef9e2a10206048
-
SSDEEP
12288:eSNj0C/PAtG9CG8Ojs86bx7pIC/BNgaT4NugyuLtU4mbY8UcAKjgyq3SU0HJHA:vD9CG8Oj16bsGBN7T4cuhUDk8pgH
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 10478520b44cb696fc777f5ab775d29c_JaffaCakes118
Files
-
10478520b44cb696fc777f5ab775d29c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE