Behavioral task
behavioral1
Sample
19e7118e690c0f498b63bbf33066e449_JaffaCakes118.exe
Resource
win7-20240508-en
General
-
Target
19e7118e690c0f498b63bbf33066e449_JaffaCakes118
-
Size
784KB
-
MD5
19e7118e690c0f498b63bbf33066e449
-
SHA1
668da5ce6fd691b3a65119dcdd91a7899a337411
-
SHA256
b9f4b6973746f93c57621fda9763940482616bf90d074e18343a0b0253d460cb
-
SHA512
7a60e9d11fedcf937784205607ed6e6e1f49072caf5c216128dbb88579cc7b329bb9d7dd86a19517791f63c81d515aa337f85da7fa7725b4240a93b74bbd8ebb
-
SSDEEP
24576:NrrrZSi7Sehl+nSIqpZNf4i2LGcRcdaIAUjbmeg:NrrV97SudIyf4i2LGku5Ai
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 19e7118e690c0f498b63bbf33066e449_JaffaCakes118
Files
-
19e7118e690c0f498b63bbf33066e449_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE