Behavioral task
behavioral1
Sample
24690464301cf932d335db959bc3a820_JaffaCakes118.exe
Resource
win7-20240508-en
General
-
Target
24690464301cf932d335db959bc3a820_JaffaCakes118
-
Size
784KB
-
MD5
24690464301cf932d335db959bc3a820
-
SHA1
c493051349caca9fb0eda12982e29b94a31be2b2
-
SHA256
86c06b213d8bc75ebe3fa172e1aa94dbde458b0b9d918d80bd5a25ea7586249d
-
SHA512
5908055edd3c90f17ed57993c3a0bcea1b02c759f82a770832847681796cade00cfbb1cf832c0929793363c1167cb2eb8883d654cc358643fef631055b47efcc
-
SSDEEP
24576:KGG2BPWBkRrmBlLSWjgbifTVn1gr9yLMzx:QB+rm3LuGfB1gr9EM
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 24690464301cf932d335db959bc3a820_JaffaCakes118
Files
-
24690464301cf932d335db959bc3a820_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE