Behavioral task
behavioral1
Sample
620f18265c350fe446dcc2b1b1ebaf10_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
620f18265c350fe446dcc2b1b1ebaf10_JaffaCakes118
-
Size
48KB
-
MD5
620f18265c350fe446dcc2b1b1ebaf10
-
SHA1
23f5a346d98b559d131afe5af0965d54eea6c983
-
SHA256
71ea17da2c6775ed1c283868ac837c9e78b1e32308958ae0f282c98239c94c44
-
SHA512
fbf1383573cb72d3ab2a441620147d74fb40dfe72fb11b6342d9249f39dc9608922d53cbdb84ef750e84ca39c538b157d33fc6879da73b24de2873c1af29bb6a
-
SSDEEP
768:CRGuY2P0Vo6r7SiAwyrMRjb4MWZOljSJZeflCX0QQyn9D8O/e++Yo5KpI52eszvC:kPcVo6r7S/rabY4OedCkQQREt+YoYS24
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 620f18265c350fe446dcc2b1b1ebaf10_JaffaCakes118
Files
-
620f18265c350fe446dcc2b1b1ebaf10_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 192KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 45KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE