Behavioral task
behavioral1
Sample
59cd7759ee13d14793cc07dcf9b1d90d_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
59cd7759ee13d14793cc07dcf9b1d90d_JaffaCakes118
-
Size
784KB
-
MD5
59cd7759ee13d14793cc07dcf9b1d90d
-
SHA1
b1601eaea136d37e467caea655a7e1996ce195c4
-
SHA256
884b98b1f800f2d3252650483fc85db47394c47c56dadc9ab02fba34df5e5b68
-
SHA512
3294ef9c05cac01b5cc7a50016cb90c7b06a0d3b7a346bb0d2bfcd69e9755a817e0cf88bfe98e7c0414967c86fb6c63fe0dafb3eb14812dee3c3518dbc4de972
-
SSDEEP
24576:Bto8plYP6wbGpa5KyohY5EwFna016cvsmKHe:Ho8HO6IGij78CvS+
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 59cd7759ee13d14793cc07dcf9b1d90d_JaffaCakes118
Files
-
59cd7759ee13d14793cc07dcf9b1d90d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE