Behavioral task
behavioral1
Sample
232e9c669db81dae4ad6fbc1070c7fd1_JaffaCakes118.exe
Resource
win7-20240611-en
General
-
Target
232e9c669db81dae4ad6fbc1070c7fd1_JaffaCakes118
-
Size
784KB
-
MD5
232e9c669db81dae4ad6fbc1070c7fd1
-
SHA1
759c406b2987acff77959a827ab44c8a46d073c7
-
SHA256
3b0632f33b1e39dd31c71823f12866f41815855a2c7ac404b246872cc320a63f
-
SHA512
e5ef6122d4ed4ddb9288721fbe64dd428e306d142c18079638c192d3c19ae3eab2641fe3da08d6f955fe2b1e988b53f388e9aef6c64b1ab12749815b04b19393
-
SSDEEP
24576:kGbqUrgfEF5Ma+GIGP4SrAb1zo2iDWDkjof:z9rCa7IGO5o2iQf
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 232e9c669db81dae4ad6fbc1070c7fd1_JaffaCakes118
Files
-
232e9c669db81dae4ad6fbc1070c7fd1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE