Behavioral task
behavioral1
Sample
62942f154e3e4df439387871ab515467_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
62942f154e3e4df439387871ab515467_JaffaCakes118
-
Size
784KB
-
MD5
62942f154e3e4df439387871ab515467
-
SHA1
55a0d339b4f7123d91bba30040f65c91ac7d5baa
-
SHA256
e4bd0ad09c46020d56e1304b00d835d11a5de323c92572601a2773e8d69ff289
-
SHA512
34888bb0108641b7faa4a99418f16a9f1c804502ab72fe699c66e56bac28df3ee3d20e7c25cf281dc476cb78599d0d3d2304b412651bf72a3fca3c09478483fe
-
SSDEEP
24576:/x+F69RvC9Ox6uK2V7K9NV5q9LbYplwVQncm0D:Z+F699CQx6opK9NV5q8lwVdm0D
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 62942f154e3e4df439387871ab515467_JaffaCakes118
Files
-
62942f154e3e4df439387871ab515467_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE