Behavioral task
behavioral1
Sample
67f852cff2dfb28eb2e7503b2dc79fbb_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
67f852cff2dfb28eb2e7503b2dc79fbb_JaffaCakes118
-
Size
29KB
-
MD5
67f852cff2dfb28eb2e7503b2dc79fbb
-
SHA1
c1083f84dd6ff5d2d2d350eb91d1a74f17592a87
-
SHA256
b85451c5875b53ebd0f451f39691184790d84b30aa5a4ea31385ccfc7bed6404
-
SHA512
552ffb5a073850d99a5b2d58aab70c6c937cad4d7772132ccd38b7172bf02bfad0b38e3525e04552fb924c5a957dc47efd2cc6313d8d32372114b9a674574125
-
SSDEEP
768:ZAxxnXjIxAnILLWBT3AA5+jn5h59cXPIX4eMXQc4:yxxcxAuMSvKP8pa4
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 67f852cff2dfb28eb2e7503b2dc79fbb_JaffaCakes118
Files
-
67f852cff2dfb28eb2e7503b2dc79fbb_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE