Behavioral task
behavioral1
Sample
4bed4f2839cbc311aacd39ca6984c471_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
4bed4f2839cbc311aacd39ca6984c471_JaffaCakes118
-
Size
296KB
-
MD5
4bed4f2839cbc311aacd39ca6984c471
-
SHA1
f5f31b4c5691a267666ef0789e8f79cd1357c979
-
SHA256
598ca4e33bdf8a1443c2ab6b249e8a2561bc4716fe373e231554dc0158384fbd
-
SHA512
c1f8272ae4dceaa9f7f27d4354ff89cc241237ea1474f590240ae3ff28ae526945a6f26d2882c90b51091f23e1e6c19e3050229e4216b28d8fb96cbab2c06502
-
SSDEEP
3072:JTUtZpaaUJ7FlxTTUXdu/6NIqjRcNQlCv4vWfYM+c0X5WUohp93LgFTzc8wAq540:VcpavHIfNXbgxfsJWVhp94obl4MWZMT
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4bed4f2839cbc311aacd39ca6984c471_JaffaCakes118
Files
-
4bed4f2839cbc311aacd39ca6984c471_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 112KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 65KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 76KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 153KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE