Behavioral task
behavioral1
Sample
4c1b74f74bfa98f2609916aeea355adf_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
4c1b74f74bfa98f2609916aeea355adf_JaffaCakes118
-
Size
784KB
-
MD5
4c1b74f74bfa98f2609916aeea355adf
-
SHA1
a33ebdd9638d159fa8f8ee4e65ab5e7f28705029
-
SHA256
e3035956bde0f481c4b59ebfc08c5f2291d4022aeaf0d5d4af09ba1ff2e91760
-
SHA512
8dd10fea647b6e32f4a7d1a349c3c9844c17fc99db631d55cf4ada809e099d110caac0d31cbe6904940f559e61eec800240efea941606d33278e42886bac094f
-
SSDEEP
24576:q9/KzkgEAExc3283THBdsGBHs99/W+wJt:q9SggEAExcxBZ3+
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4c1b74f74bfa98f2609916aeea355adf_JaffaCakes118
Files
-
4c1b74f74bfa98f2609916aeea355adf_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE