Behavioral task
behavioral1
Sample
689722f9e3caccfe4866303e426c32dc_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
689722f9e3caccfe4866303e426c32dc_JaffaCakes118
-
Size
204KB
-
MD5
689722f9e3caccfe4866303e426c32dc
-
SHA1
b502df5e22f99b71d74869a15b9704dd744bf415
-
SHA256
2de0454debca6bdf3987c74e015b90098e60be9202d495c2aa8e3a80c786ea61
-
SHA512
9e27ac3bda159154f2d9932a34d365d3cf6cd24ae74a33f3e78c9af7721fff0e42d6d5176037f426cd8d9ded6376e0bbc441b43ec3ee8a3b839d9fe0e3603b77
-
SSDEEP
6144:AvX1tlTZYZeS6ZIbtpxh56+7o6YwE4K0D:WtlTCZeSIIbtL6+7k4
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 689722f9e3caccfe4866303e426c32dc_JaffaCakes118
Files
-
689722f9e3caccfe4866303e426c32dc_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 356KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 196KB - Virtual size: 200KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE