Behavioral task
behavioral1
Sample
4446c2256a1856cba32e844f43603642_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
4446c2256a1856cba32e844f43603642_JaffaCakes118
-
Size
784KB
-
MD5
4446c2256a1856cba32e844f43603642
-
SHA1
9529c22b1a6f4d31aa22e1f60b652d5a06718b7b
-
SHA256
e967f0913c74f0960ef491a356438989c1a3af52d0a593e8950f42b857b5eb9f
-
SHA512
9760bb3880df8eec14378ec847859154f64526b6f1ca7cd21329b732842e07d06d3cfcded45aa9b9a3bcc2cc7f2efa0d1f792b2a7efa35228e341073cd3d2d5b
-
SSDEEP
24576:Qje6SGxPefq2cjWe843Rpu3BmYPuOnEe:QORcjWe82RpuRmYPuO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4446c2256a1856cba32e844f43603642_JaffaCakes118
Files
-
4446c2256a1856cba32e844f43603642_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE