Behavioral task
behavioral1
Sample
18482c2f1b5ea35f211b8f495e00fc79_JaffaCakes118.exe
Resource
win7-20231129-en
General
-
Target
18482c2f1b5ea35f211b8f495e00fc79_JaffaCakes118
-
Size
784KB
-
MD5
18482c2f1b5ea35f211b8f495e00fc79
-
SHA1
0d1f76a760e6b80749c2413435b8b6455f4b3ee7
-
SHA256
1b6548225c1f450755cd38b77b05a03c269464b2c64f598167d73e3649ba536f
-
SHA512
70e230aacd9f0c557acb025b00fe76752b18f30bbb8cd6d99e1c5aad6262e5c187d29d9a0c316ae6d494661e63e99cfedc2df72b990b39170e95de616313a666
-
SSDEEP
24576:BsESnEK1SlXrnHw5DSBU8CoJF3Fw9A325cj:BsE0EKklrQoQozC90j
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 18482c2f1b5ea35f211b8f495e00fc79_JaffaCakes118
Files
-
18482c2f1b5ea35f211b8f495e00fc79_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE