Behavioral task
behavioral1
Sample
47777333561c2375857bed2c57d28ae4_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
47777333561c2375857bed2c57d28ae4_JaffaCakes118
-
Size
164KB
-
MD5
47777333561c2375857bed2c57d28ae4
-
SHA1
941c7838b11cf9527b4830b639b5ceb713799b43
-
SHA256
bf9d9ce71dea3f440e3ad515f80e77500b67dd9990922fda08ab091430e4646a
-
SHA512
4e759fd65026ab22b3c4fe73b7eead5b5e6e5ffa385f76575029e349c0aa523517a193c7b46b9e409a713b5c5fad306d89a41e6459d7088f9c761869aa5cb8ef
-
SSDEEP
3072:SWoGRdx9XEJ9WSJMDONLEJcP9sXtl+rnIGdpzkNbD9QAwfJp:SQx9XWJMDONLuDanIGdpzgo
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 47777333561c2375857bed2c57d28ae4_JaffaCakes118
Files
-
47777333561c2375857bed2c57d28ae4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 156KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE