Behavioral task
behavioral1
Sample
4ce9f9c4f9440c4bf453872cc6ab9310_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
4ce9f9c4f9440c4bf453872cc6ab9310_JaffaCakes118
-
Size
784KB
-
MD5
4ce9f9c4f9440c4bf453872cc6ab9310
-
SHA1
db969b9b0eda590dc8e6c0e3a8572c4dc1c7180d
-
SHA256
8c6acc1e453b5c0ff66fa098e2206a9c2c35c3ee92206ab43fa2d5ef9c88fd0f
-
SHA512
a41b8ccc09bb86281c7a583dd8fe1b1c9f3a878ff02e7c3fad61458c8e309b62d84e0526e50fa3f6b8ebd261b937a798e07112237d3cf652eb873181f69d81cd
-
SSDEEP
24576:gBtULcJvkpr03pLgRXmhO82LSor1zJCl:gBtUQ1Er02R2Y1Pr1w
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4ce9f9c4f9440c4bf453872cc6ab9310_JaffaCakes118
Files
-
4ce9f9c4f9440c4bf453872cc6ab9310_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE