Behavioral task
behavioral1
Sample
1c8817bf3b14d60bf9cc8ea0df3f2467_JaffaCakes118.exe
Resource
win7-20240508-en
General
-
Target
1c8817bf3b14d60bf9cc8ea0df3f2467_JaffaCakes118
-
Size
225KB
-
MD5
1c8817bf3b14d60bf9cc8ea0df3f2467
-
SHA1
cd3a883c0352a850e840c300e98ccba30cf60fcb
-
SHA256
df1b8dfbe84f4163256d90958f60c18a5195a491f5f35da909abd9c2b643c5a2
-
SHA512
1a5b7aa6a8e41ffb093b290450c646f79be7c1aaf22820061b81a8aa683208ef6536ceff9368a1331386c2619125d936635f4be691e28815745add0952767168
-
SSDEEP
3072:LuUFrpwzAE+GGNnp6q1u5dEXrifxvJd+lMg4zIGv9Prx9rDV2XbsG0AaeDEYaV3k:LrFqV7Mq+efxJ46gNk9PrfGbskaeDEr
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1c8817bf3b14d60bf9cc8ea0df3f2467_JaffaCakes118
Files
-
1c8817bf3b14d60bf9cc8ea0df3f2467_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 360KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 218KB - Virtual size: 220KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE