Behavioral task
behavioral1
Sample
647c163377ea98293d5310c5d25ac617_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
647c163377ea98293d5310c5d25ac617_JaffaCakes118
-
Size
819KB
-
MD5
647c163377ea98293d5310c5d25ac617
-
SHA1
4f4714bca485714f44bce9bfdd69272ef4949bf4
-
SHA256
d50819e1d99e2bcca9c72e2483887f3b1d01ccf37f22bc578279e442fa906fc9
-
SHA512
f6d288c1d1ba2e9080aa3a0db9f60a24bf1a7106188ddc12285865bce1da670197d97916b6c38f7d3e0a9402c528f3086af36f9bcbea3c89119d05007fdcb4eb
-
SSDEEP
24576:RZTcodGqOiRhibEA7EehnwrJqZwvdQQR:DQLqP3ysEkdv
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 647c163377ea98293d5310c5d25ac617_JaffaCakes118
Files
-
647c163377ea98293d5310c5d25ac617_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 488KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 529KB - Virtual size: 532KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 289KB - Virtual size: 289KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE