Behavioral task
behavioral1
Sample
4a011dce06aebaf4af6827f2cf0a9aec_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
4a011dce06aebaf4af6827f2cf0a9aec_JaffaCakes118
-
Size
40KB
-
MD5
4a011dce06aebaf4af6827f2cf0a9aec
-
SHA1
d3115da39d918e7bf85fc0ed53cde798a66014d3
-
SHA256
d47fa1e58b3c31660c20fcd18b69f2522d1974de9e9b85008cf0540f8228d3eb
-
SHA512
30ad1187f7c231a5fa9a37032631133b04b61e3d0f58071af8c85313fd52129cd6609ad9c7561869ad5fea1959911a6960ce6b02fb883bb6bebd95af5ed2933c
-
SSDEEP
768:D4gvVrqnanuCu9VTqTn5ND9QHC/UKkrwj5J0RBp3IhtDqHC:5droquCIVGjHCHwj32Gt
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4a011dce06aebaf4af6827f2cf0a9aec_JaffaCakes118
Files
-
4a011dce06aebaf4af6827f2cf0a9aec_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
lvpbkpm Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE