Behavioral task
behavioral1
Sample
22625c65c2904abcec783a3da3aff2f6_JaffaCakes118.exe
Resource
win7-20240611-en
General
-
Target
22625c65c2904abcec783a3da3aff2f6_JaffaCakes118
-
Size
1.8MB
-
MD5
22625c65c2904abcec783a3da3aff2f6
-
SHA1
c5bb3e9357c9f9bb6c2712fd0e731a224658e7a7
-
SHA256
eda6947cfd35d35f005e34111713fabc7e2da2df71842b46104c7073875e19cd
-
SHA512
6e5f1585b832e22b2b1fb4ef777cf5bba3d93bc04d82dc31ca2ea66a6362036dd033003c25c1e2fd98b507753460cc4321dacba594509e164e8af20c09710a3d
-
SSDEEP
49152:+QmNMvj1VTW8g0f6cwEmEiUTfkwEmtzdtahee64mC:aQJW8fEp1UTfe64mC
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 22625c65c2904abcec783a3da3aff2f6_JaffaCakes118
Files
-
22625c65c2904abcec783a3da3aff2f6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 651KB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 215KB - Virtual size: 739KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX Size: 1013KB - Virtual size: 1016KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE