Behavioral task
behavioral1
Sample
422aafd11e53e82027a16ab52f406e8c_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
422aafd11e53e82027a16ab52f406e8c_JaffaCakes118
-
Size
784KB
-
MD5
422aafd11e53e82027a16ab52f406e8c
-
SHA1
6a3974f2d0010b3c2407a4de04d3a450deeff0ad
-
SHA256
dea4b0326210b5c330617aac99d649de008c59e439d7bf5968d308b7f98086ca
-
SHA512
a6c23b0b208e0bec9fb3c38b917cbc8cad257f98580b02aa7ffa775a4a6a4a4a1d74388a8fdc4f2a1a3d97f7ed547784f02bafab2c88c61ed00b99347d0c585c
-
SSDEEP
12288:Mmq94tpSEWTZgQv/3smR8A2Rpo4mB2Uu1jQZLr/TbhQ2ZC7WCkz0KTbjwoHD0xbO:vqitcPT+S+F64m0UuxQZLFckz0KTbcq
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 422aafd11e53e82027a16ab52f406e8c_JaffaCakes118
Files
-
422aafd11e53e82027a16ab52f406e8c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE