Behavioral task
behavioral1
Sample
4a69c9b70d19006f3670b42320674548_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
4a69c9b70d19006f3670b42320674548_JaffaCakes118
-
Size
784KB
-
MD5
4a69c9b70d19006f3670b42320674548
-
SHA1
5979c09d9b37fce7dcccf6403e7bd47395c5792f
-
SHA256
b32ee2e6db41e294998de1130df2aa07380c7679e9d3a30b6a0563cb22590053
-
SHA512
2e3159942186e2dbbad370a7a3f9307f8c6061e273a98126aef9e2b4c230bafb93bfdf86c771aa874434c75f421699b5cda968ada354bf2acb9f017293a96f6d
-
SSDEEP
24576:0HXDEiw1mBJhzAIC7KaDvR6p/uDvPDkJGQb:0zEhK3MIWDUp2DvPAJGQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4a69c9b70d19006f3670b42320674548_JaffaCakes118
Files
-
4a69c9b70d19006f3670b42320674548_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE