Behavioral task
behavioral1
Sample
601282fabb89058c3d7ea8eca08e3830_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
601282fabb89058c3d7ea8eca08e3830_JaffaCakes118
-
Size
784KB
-
MD5
601282fabb89058c3d7ea8eca08e3830
-
SHA1
346aa3e81f9ea89340dc73b56a42a467e546b18b
-
SHA256
bc4ba3abb7e0c6891d64e33e86cc5d37d188983831f41ba1812f46045f0bcfbc
-
SHA512
32cc003435c500baf89d5715f8177093877b018cd4f4cbb764d1743d88a8fcbcee7ce6ea779f1ecd48e701fc45bc40be711bd905805ed4e5af4cdb30616d6732
-
SSDEEP
24576:e+auUYfDWHzW+YWweuf9icuJq9jIWPw0Y5J:e+aVYyYWwX0cuJq68VaJ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 601282fabb89058c3d7ea8eca08e3830_JaffaCakes118
Files
-
601282fabb89058c3d7ea8eca08e3830_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE