Behavioral task
behavioral1
Sample
4ca65af00f69caadf7b0a98dc0e30e2d_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
4ca65af00f69caadf7b0a98dc0e30e2d_JaffaCakes118
-
Size
784KB
-
MD5
4ca65af00f69caadf7b0a98dc0e30e2d
-
SHA1
845f7a4f0283addedbd2506501408a0b6dd0db0d
-
SHA256
dcc15368e16b67d65249114a4b928f35b9955ea2a477f5e7ba71c197ad1d858e
-
SHA512
d1b959717a70650c559a0e306cdcd73939fd0475572ee424ca18e73e3580ac30e69007b1722b6b76682bfd01243b4351e1dd2c7c35eb0e8513e2283003b59208
-
SSDEEP
12288:QihzBLja8JczHZXydl6lBJZh7JG8IEIP169bmshV8V+8NuVSkXeIroAMEZ:QudXj6e6rJZLG8I7P49bmsWo7e4Z
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4ca65af00f69caadf7b0a98dc0e30e2d_JaffaCakes118
Files
-
4ca65af00f69caadf7b0a98dc0e30e2d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE