Behavioral task
behavioral1
Sample
4623447eab3a4c0ac104e5ea3c19cefc_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
4623447eab3a4c0ac104e5ea3c19cefc_JaffaCakes118
-
Size
146KB
-
MD5
4623447eab3a4c0ac104e5ea3c19cefc
-
SHA1
8d5f708ad8a169051c87a0bd4d1a72c6b0ebe9f2
-
SHA256
ab51474afb042d29a549d2c367c135894ed4af3c603da37c7eba06bc66238799
-
SHA512
3213095aca8a76dc269020e49d6e1ca1c73e12e9bd4164be6a6ffb08161b70fef8857cc2d7ce747610d0f052353ecb6dd1b30efd2bd1314f13ed870a77c516c5
-
SSDEEP
3072:vSafVgdJSGHa1e7hNunVeauL6+BBaVoutAB77777J77c77c77c7:vSaWHSRAlNudVoSAB77777J77c77c77I
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4623447eab3a4c0ac104e5ea3c19cefc_JaffaCakes118
Files
-
4623447eab3a4c0ac104e5ea3c19cefc_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 272KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 136KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE