Behavioral task
behavioral1
Sample
688361dd2b8688ab304c0ac26c037cfc_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
688361dd2b8688ab304c0ac26c037cfc_JaffaCakes118
-
Size
784KB
-
MD5
688361dd2b8688ab304c0ac26c037cfc
-
SHA1
f4b92e7feaf0ebc35a400763c7d608ee37f0a316
-
SHA256
8da2f64019bb8ac6cd243b77a688a2aa7a5ba56775b7f670b18102b745a43eca
-
SHA512
001c61c31406536f7563b3dd51a2dc27da35f59853cb3735d4a660468f43a563dc55cd25de9b1d0d76292a5ef6f247a8e2aeebcc7a6d3a7a486ed6ab7c05a731
-
SSDEEP
12288:0oaiWrehlgUiSRhwl5/mJZAIu1lkCPp+COC/w4URATbGH1AG4Dn1iP89:9aiJ4SO5eJbuE4//w5RATbkr4DUPG
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 688361dd2b8688ab304c0ac26c037cfc_JaffaCakes118
Files
-
688361dd2b8688ab304c0ac26c037cfc_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE