Behavioral task
behavioral1
Sample
461e7c536c6f926cb6d5ba54212941b2_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
461e7c536c6f926cb6d5ba54212941b2_JaffaCakes118
-
Size
88KB
-
MD5
461e7c536c6f926cb6d5ba54212941b2
-
SHA1
849d750f6b6b479e02f9fa796a99e6fd2ec9be1a
-
SHA256
40af049ff27a05c356d752a09af1dc585cff23a5410da713615ad8cbd7587f8e
-
SHA512
4ddf7c83b4f10741ef8030cb8017853521aa4530fb741d72d05a26e23cd7dcfad28dd346f2b9c3c0d9cf2e46f1aa5b211b3e4b7717654a9041254e526db0212c
-
SSDEEP
1536:pKKvg9V42sh5vB0z7jRnArmqXOB6V8cwJ0eOEtKiCMIFiE9d6u3SD2KA:wV9ORVK/FArmQi6VeJ0eO7KIFiE9d6up
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 461e7c536c6f926cb6d5ba54212941b2_JaffaCakes118
Files
-
461e7c536c6f926cb6d5ba54212941b2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX3 Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE