Behavioral task
behavioral1
Sample
23e239026624009a94b8298f082cd943_JaffaCakes118.exe
Resource
win7-20240419-en
General
-
Target
23e239026624009a94b8298f082cd943_JaffaCakes118
-
Size
784KB
-
MD5
23e239026624009a94b8298f082cd943
-
SHA1
c70f7ec040b7630a4d57250b29710e84849635a7
-
SHA256
655ebb282f8afff066b97ec6dc8497954bcb4be330b4669e0ac73a0a46aca91c
-
SHA512
6c40fddb6cb5786d4e053189b38233dfac039d08ed4e110011ec38eeb5f855e1165afcb8e96a5f9494ebea17cef6b51142c4c46d5edb122de068e0f3be4af3f8
-
SSDEEP
24576:Oy9qMVVUVltNOEq5u5878qRUfrJAXhFY2Xj:jvUV/NOEyk84eUzJeL
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 23e239026624009a94b8298f082cd943_JaffaCakes118
Files
-
23e239026624009a94b8298f082cd943_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE