Behavioral task
behavioral1
Sample
429ce3535cc40f01407c9c563be46368_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
429ce3535cc40f01407c9c563be46368_JaffaCakes118
-
Size
784KB
-
MD5
429ce3535cc40f01407c9c563be46368
-
SHA1
cc292dce017375968492f98fed553f21caa5145c
-
SHA256
5a22006cb2185c7a3733ac582a0580a43d75c5cd1d3d3bb14e02debf62c0575f
-
SHA512
6df3f58389f6d78d783f2b717acbaa3613bea08da7d8f673e4d9343df072855d436a216b36a56a25da10d241e0892cfc5e60a80476cb785b2d72b75946df2f95
-
SSDEEP
24576:KGG2BPWBkRrmBlLSWjgbifTVn1gr9yLMzx:QB+rm3LuGfB1gr9EM
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 429ce3535cc40f01407c9c563be46368_JaffaCakes118
Files
-
429ce3535cc40f01407c9c563be46368_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE