Behavioral task
behavioral1
Sample
639e8af692f5ca4156cbb87c7c878b9a_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
639e8af692f5ca4156cbb87c7c878b9a_JaffaCakes118
-
Size
784KB
-
MD5
639e8af692f5ca4156cbb87c7c878b9a
-
SHA1
fce2ab2806e4ac300706250f6b1086d1d0ddc274
-
SHA256
76664648bea553987fa4f7da5c4c77f92faf457b8caa61f47abca58e4a8d847a
-
SHA512
99d7b22edec0c90ff4b1475d1dd52e44c5925a330bd31f2ad9fefb120529848f485a740c5707f9724dbd48b4ce6e27a515e9872fd1ef139979081bb2c12161d4
-
SSDEEP
12288:3fm22YPefg9s4X8qYle06WOERiCAMO6roYScjb39GysU1pLXCwcxtOqRtKBNuLJ:3jLGMsY0lOERiCfoy3jsGpX4R8Bm
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 639e8af692f5ca4156cbb87c7c878b9a_JaffaCakes118
Files
-
639e8af692f5ca4156cbb87c7c878b9a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE