Behavioral task
behavioral1
Sample
4544865b8d2b8f63147645f60b704521_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
4544865b8d2b8f63147645f60b704521_JaffaCakes118
-
Size
784KB
-
MD5
4544865b8d2b8f63147645f60b704521
-
SHA1
1bb95b20be45bb6b4b59147abb57eb9085bc882d
-
SHA256
83301c6ece5b042b5ccd8223970cceba98f61760c68d7e93f0684ac317d955c6
-
SHA512
2bfe4bcef0f40280080b99e41253bb59d2699d480c68d1ac516bbcf2a58e9b29f4361f5b5fb075a79c040be997431129b3b7ee69dd7124332e6fd1811422cc85
-
SSDEEP
12288:x7bWh6dKL7bF8CpVQLMfNQkyGCyPrxzsS9EHy0j/4nzrxZljV7cResKsOKVdB4:tS6dE+I2MNQkmyPrFETkzrxZRV/sKy
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4544865b8d2b8f63147645f60b704521_JaffaCakes118
Files
-
4544865b8d2b8f63147645f60b704521_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE