Behavioral task
behavioral1
Sample
429b4b540b3b76693a1fd63e5b79dbcc_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
429b4b540b3b76693a1fd63e5b79dbcc_JaffaCakes118
-
Size
23KB
-
MD5
429b4b540b3b76693a1fd63e5b79dbcc
-
SHA1
b0ae459a656b5eca72d5ea034f7c7eb6618f5556
-
SHA256
e06b0a70af2bf3e22a380d8da94b8cc00696d9867d61cae40f44578b1ed706ae
-
SHA512
42ee66f3a2ca26c31dd5ac55ca710c29a3ccb54921b16f7502df742ab93497f281d6570fe65e7735a7757a5f0e7e8d3f870cdc37aae85b22271d2e8d31938baf
-
SSDEEP
384:nW1r9sOcIp6wRcsSYLvKWLWbstQTid6HJyraXkqdkJ7PNWooBON1aNJawcudoD7H:nYmOhplcsHvKWzX6HJmFqda7koQOenbr
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 429b4b540b3b76693a1fd63e5b79dbcc_JaffaCakes118
Files
-
429b4b540b3b76693a1fd63e5b79dbcc_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 44KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE