Behavioral task
behavioral1
Sample
426a0249ec32803e2cfac546c7e4099d_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
426a0249ec32803e2cfac546c7e4099d_JaffaCakes118
-
Size
784KB
-
MD5
426a0249ec32803e2cfac546c7e4099d
-
SHA1
fbbeb59d8a7e51add19f45f8f16c2037b762225d
-
SHA256
e825b105c3d2f37e3ae8ec7f08a6d4b8bc1d37a99f65584d40c0aec62dd1233d
-
SHA512
25acf781faa832d57bd51738a9c34ca75bf354f0259a63125c278675eb23f62703938f75f4b5464725ee01dc4478eba1c231b8245ae9e32217d6b64678171095
-
SSDEEP
12288:pi0l+nRQ59Skxw+S1YJiojbVywHBuO9Nn1joCEY7E0mWP4DCTM1u7QdUb:pInRw9VxDS11oHBueEY7yCXQdU
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 426a0249ec32803e2cfac546c7e4099d_JaffaCakes118
Files
-
426a0249ec32803e2cfac546c7e4099d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE