Behavioral task
behavioral1
Sample
456e6fb0678bd6cf39375608255638ff_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
456e6fb0678bd6cf39375608255638ff_JaffaCakes118
-
Size
260KB
-
MD5
456e6fb0678bd6cf39375608255638ff
-
SHA1
49201dadf2020ffd6936df0fb980c14b5b3a562c
-
SHA256
128f29360484f88f1e78bb9b4c13acc9c962a9906d8f1763e8a5a8016b7377e2
-
SHA512
99ee91d2ddde248d9f4c4d1953db4ff09bc5ff869c8fe40fe1459efdcb0f1ac7b79482e8c46cad906ebc432f02c3153ff75803f086af3a61363f04ddf717d87c
-
SSDEEP
6144:EBTD5viOVyUxRIKVM1jlOS52c2Vyg+m3EpTanm2OxXoSV:4/5vYQtVM1jlec2z+9WCxXoS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 456e6fb0678bd6cf39375608255638ff_JaffaCakes118
Files
-
456e6fb0678bd6cf39375608255638ff_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 596KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 248KB - Virtual size: 252KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE