Behavioral task
behavioral1
Sample
68942b065e48a4769774e40f46234745_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
68942b065e48a4769774e40f46234745_JaffaCakes118
-
Size
784KB
-
MD5
68942b065e48a4769774e40f46234745
-
SHA1
90ab6fa3c8a1a94482d7ee0e5a341588ffc7616c
-
SHA256
4fc327524004f40ab1a7a5dc47d220ab984aabfa0edbe566afa5267dff5e341e
-
SHA512
a4e83f78e0620f8f1f5e2ec2ff62888ebae492c336fb604b2098a46daf993fbb44f864805e4e3e1f95ec4428a2511ca9f71320d9c8afd636ade0a591b14fea4d
-
SSDEEP
24576:PsfjfQkaR1yqZ9WNr4bmywUBsN1QYf7cgXoXOVXo6dt:MjfQka7yqZ9arq9wUSTcg26j
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 68942b065e48a4769774e40f46234745_JaffaCakes118
Files
-
68942b065e48a4769774e40f46234745_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE