Behavioral task
behavioral1
Sample
697a4b62478f62da2d4c379455058f78_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
697a4b62478f62da2d4c379455058f78_JaffaCakes118
-
Size
259KB
-
MD5
697a4b62478f62da2d4c379455058f78
-
SHA1
93bdb814d1e8cde1a5e54e8d50a1679b76556fca
-
SHA256
4a254cf15ca7b12f665b33ace1153989008f7599c1f21df9305f6d17d3671daa
-
SHA512
3cf61b124a139aa8b233296308ba9bb64639131975ca2fb68318810b0fc2a64cdfb67ff2d21728a31e5d8d6a30b42c1764da4c7c13b55996282c29b5bf7787ad
-
SSDEEP
1536:2LnoRnGm56gy2Xbpk7UY92NAph+vfNVlyQkBAy1OknLP2:2+nGm5677UGTIfMhlnLP2
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 697a4b62478f62da2d4c379455058f78_JaffaCakes118
Files
-
697a4b62478f62da2d4c379455058f78_JaffaCakes118.exe windows:3 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 200KB - Virtual size: 200KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 57KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE