Behavioral task
behavioral1
Sample
652e78d2ce573aa3c797bf511f548534_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
652e78d2ce573aa3c797bf511f548534_JaffaCakes118
-
Size
1.1MB
-
MD5
652e78d2ce573aa3c797bf511f548534
-
SHA1
87b862d7d0ad98e13352fa6aada99fd811c4f8fc
-
SHA256
c2aaffca47959b69de8ab7564c6b6669f5fe276a7564406e6feaa8d077874ade
-
SHA512
c3b043aadd2d5001bd12ac639b833594d99c8e1712c19daed83da20f4173a8937915c358111215d0d66fe002a630565a133aad90488b6b85ec44a9090bfd4514
-
SSDEEP
24576:TynbxXsifrGa7cCLeOexTOXghToFVppUrspBsRgj:GnbJs7a7cCDexTUghTy6spSS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 652e78d2ce573aa3c797bf511f548534_JaffaCakes118
Files
-
652e78d2ce573aa3c797bf511f548534_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 580KB - Virtual size: 580KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 540KB - Virtual size: 540KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE