Behavioral task
behavioral1
Sample
463bb1234728e9ceaf2bc8cf5e2ba610_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
463bb1234728e9ceaf2bc8cf5e2ba610_JaffaCakes118
-
Size
784KB
-
MD5
463bb1234728e9ceaf2bc8cf5e2ba610
-
SHA1
cc40468a9531141c0580ce5906c801f93848e08f
-
SHA256
9d3c19e864ee0220510e7416e4ce8a2f0d7e10dbf68b24882a6edd859a1d7791
-
SHA512
a44a485a90678b6461cb7c37b92cb67c20f219e3eef17871d254e10312723d0adfb222e1c800c3e6c50675ed69a30e7a4332cab7776c0c3bedc7c6157e5f8f0a
-
SSDEEP
24576:KrxL0/Dmf6BTJttFClkcGJD12RiSHyaqH14wS25HU5Q:4LkDTJg5GJ5KjFa0
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 463bb1234728e9ceaf2bc8cf5e2ba610_JaffaCakes118
Files
-
463bb1234728e9ceaf2bc8cf5e2ba610_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE