Behavioral task
behavioral1
Sample
423f2b224aa02599df57d29bc40f96bb_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
423f2b224aa02599df57d29bc40f96bb_JaffaCakes118
-
Size
784KB
-
MD5
423f2b224aa02599df57d29bc40f96bb
-
SHA1
96b123e55440b77e5d935ab72f1ca998bba4c6b9
-
SHA256
e70ff81b7564bde878254aa57081bcc70ce098329b7098102bf7302b5e9bad5e
-
SHA512
2b8cb255b135e1d0db4a137ef13cd1844174fb7e284e88b3e3f8f8df3ef99116f77277616bcdb2b29d21533695e64027f494254ad5b0f7778cea391b630528df
-
SSDEEP
24576:zPZn0etAzr+6SYZXtIymvCJ6hYpp6y7dZpJI9:zRnztw+D8X3mFhY/6IJy
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 423f2b224aa02599df57d29bc40f96bb_JaffaCakes118
Files
-
423f2b224aa02599df57d29bc40f96bb_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE