Behavioral task
behavioral1
Sample
332bdcc077f04ecf82d31baf4ae8872d_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
332bdcc077f04ecf82d31baf4ae8872d_JaffaCakes118
-
Size
784KB
-
MD5
332bdcc077f04ecf82d31baf4ae8872d
-
SHA1
93bd8beddddfaec54187d7f5e8215a2136f8a92f
-
SHA256
b4aad9a91c7f105edd06795202ed8c4f07c27abff86d8e37663718d1fe123d88
-
SHA512
f4e93a36552919c9d04bed3b1b89847e54629af19ac20fd3dc74772b49993254f56c733dc994d5342da4746a011f665bfd073840eb44e0b2bc2e7b65a82f7fe2
-
SSDEEP
24576:aThNLZX+zLM47gFY1ReqWfGebLEHeFKExhFTFL:klEg21QOeQIK2hFZL
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 332bdcc077f04ecf82d31baf4ae8872d_JaffaCakes118
Files
-
332bdcc077f04ecf82d31baf4ae8872d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE