Behavioral task
behavioral1
Sample
63544a8c077a1a1e28f537b57bc8971c_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
63544a8c077a1a1e28f537b57bc8971c_JaffaCakes118
-
Size
49KB
-
MD5
63544a8c077a1a1e28f537b57bc8971c
-
SHA1
87fe8d486924a55920d70d28528f484c4d096dec
-
SHA256
ace34ca5de5bf9a1ba19334089f345cc5181ae680ed3911f05b140ef13d4e601
-
SHA512
929a957217dbb2ffa6ea48bbe9d18e437bdd29e44492576e5c42a7abb2ea48b4cb5225d9d94afb6c573961f7566a4eda6d4d6434186dea396de0e6a516dc5fb4
-
SSDEEP
768:/vhVHAjRT5mJJh7O5HVfHelDUoX/oVGHV7HJ4DiPqNs9XJ30JJXt6XVmVrX0nbcS:/vihHcg4HVbw8h0J1tlCnouy8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 63544a8c077a1a1e28f537b57bc8971c_JaffaCakes118
Files
-
63544a8c077a1a1e28f537b57bc8971c_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 124KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 47KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE