Behavioral task
behavioral1
Sample
684aa0d6371b108bb223b94a946b19a8_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
684aa0d6371b108bb223b94a946b19a8_JaffaCakes118
-
Size
56KB
-
MD5
684aa0d6371b108bb223b94a946b19a8
-
SHA1
8c27ccf1ffff8a51a6257575bc60373a2cc69184
-
SHA256
2c585df1acefd9e94b52f7fe9676c520920286c5135aa78bc48916cb9d64a86a
-
SHA512
46838a7a48be3cc5190e5db730da5c0465533546995c2a6d63a2244bb42571f703a8052d7e0ebe26e5d39f8639994f54086ad4c8531676c2179605c68c5d3878
-
SSDEEP
768:EfiWoTHvkOa3dGTpzlhZNATKKGMD6OA9T9e3iM0140SYegJl+6aGYN5714TXNSBI:VpTHvkHdGTpBG5GMXAFa06gXpT99
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 684aa0d6371b108bb223b94a946b19a8_JaffaCakes118
Files
-
684aa0d6371b108bb223b94a946b19a8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 168KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 55KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE