Behavioral task
behavioral1
Sample
20c4f28d05954b29b76899be54946bd3_JaffaCakes118.exe
Resource
win7-20240611-en
General
-
Target
20c4f28d05954b29b76899be54946bd3_JaffaCakes118
-
Size
784KB
-
MD5
20c4f28d05954b29b76899be54946bd3
-
SHA1
c127729eebc1c8017fd093a3f0e3e36a57461d67
-
SHA256
351dbe57a1135480636832b2001e52738364cbbe8315bd5fa56b142c4da1c500
-
SHA512
0597266ba32c7d74b9a7a7a129027cce181b80d5bac3c851532e098b4f9d2c194310933c4a4b08557662e6b1a26476a62cc9589061d6334b91428a13cb2b10a9
-
SSDEEP
12288:2R8hMLCsGYTjPbhZydXRkS+3O7K2gt5nw9I3XhNXPPmkKaMwfF35hvlU0gt+fe64:2MsL/Oxz++PqOmykBa/tHkkZMAbeC
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 20c4f28d05954b29b76899be54946bd3_JaffaCakes118
Files
-
20c4f28d05954b29b76899be54946bd3_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE