Behavioral task
behavioral1
Sample
1707f31659b200a0add5ba09b195f4b5_JaffaCakes118.exe
Resource
win7-20240611-en
General
-
Target
1707f31659b200a0add5ba09b195f4b5_JaffaCakes118
-
Size
784KB
-
MD5
1707f31659b200a0add5ba09b195f4b5
-
SHA1
aa468d1e1b92037c76fe0d9e41e5c6a267c829f7
-
SHA256
4007cc9f47b3e9b7d0581de9b66918738c090b9220a206b45a5e057f2a268ad5
-
SHA512
13fd0eee15fd2779fca8c495e8c421e80b6d13950143e982fc6f5040f99b6a472f6b2fa5d803ef7e04dc35f996b3b08cbea21edec07436304244f8eaa8365668
-
SSDEEP
24576:66xwRkZ0s4gkQuKmynkjoiav7O3y1Ogca6BmKstdhMO:LxPGvgvuLjxUOMZca6cLDl
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1707f31659b200a0add5ba09b195f4b5_JaffaCakes118
Files
-
1707f31659b200a0add5ba09b195f4b5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE