Behavioral task
behavioral1
Sample
426f6c5890c42712f64b5b68cee68c78_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
426f6c5890c42712f64b5b68cee68c78_JaffaCakes118
-
Size
784KB
-
MD5
426f6c5890c42712f64b5b68cee68c78
-
SHA1
097ad9eada05ac9e15588ea8dde5a806f814386d
-
SHA256
d07cb434c3f41929787d358a15673113191ababdfd180d9a59317c2d8b9a5ee4
-
SHA512
0ede9d927b994bd41383ba2cf2aed5f2d3ceec129e068dc2fe0251130746e188acf62c5b332dac7138e93acb0088149360d0772167000b7593a73c0a26bbb92a
-
SSDEEP
12288:HUa4F/eMxl5BP5BHRtD67omUKksCnPpXr1VnXOT+0LKCDl37i4Q/cIbyC:t4/N35BP5BHRtDyksCntfZCDJxQ/cI
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 426f6c5890c42712f64b5b68cee68c78_JaffaCakes118
Files
-
426f6c5890c42712f64b5b68cee68c78_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE