Behavioral task
behavioral1
Sample
441384044854843ad0d6747cb98e79ad_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
441384044854843ad0d6747cb98e79ad_JaffaCakes118
-
Size
784KB
-
MD5
441384044854843ad0d6747cb98e79ad
-
SHA1
6b2dde5985bd3c66016150b19cbee709a3cb6f11
-
SHA256
7c4f114a686353737841ddca6152cdb3d37c4ec4172f0e57be97cb57ce02915c
-
SHA512
e44557d75833ffe70fb623f7fc58e523a054e0e7556b1665c84c60e6b36866f06bff8b4b72da0cedba7337f7b333cf4c45d9719edbc2da5a0e05e1501c4ee352
-
SSDEEP
12288:7IqgsJS/YIHYZ7f89ivigEBDhTLPW5twnEXjBsEOmvdjFyQ8nv15Kyf:7Iqgso/YIHYZLmiABLymo2EZdR/w5H
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 441384044854843ad0d6747cb98e79ad_JaffaCakes118
Files
-
441384044854843ad0d6747cb98e79ad_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE