Behavioral task
behavioral1
Sample
1c8f20b09e319e05d576d7366ca3eca6_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
1c8f20b09e319e05d576d7366ca3eca6_JaffaCakes118
-
Size
784KB
-
MD5
1c8f20b09e319e05d576d7366ca3eca6
-
SHA1
73b905baf8d8536f7f85b54ab387af47eb734860
-
SHA256
5bb4baad463c6d5f9acfd3a5bc516092220574b97247480fe2101fd9a324b1ac
-
SHA512
93f1e7e0e9393d296cd74258f9a9e89d0da2a62863d7208a43ed099a0905e9d30c74e86e6fdf469dced3af199d7f82442ab0cd260e9ec5917830434093ce5a81
-
SSDEEP
12288:EZlgYjk//iOunOtMTO4N53S6UbEGPRMaAuv4Vqg//UOMV6/ooIb1SoTuEng+AbE0:Ew+kdo59SZPGuvUF/o3TuM
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1c8f20b09e319e05d576d7366ca3eca6_JaffaCakes118
Files
-
1c8f20b09e319e05d576d7366ca3eca6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE