Behavioral task
behavioral1
Sample
68f90e4762fc46cb098935596078b355_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
68f90e4762fc46cb098935596078b355_JaffaCakes118
-
Size
421KB
-
MD5
68f90e4762fc46cb098935596078b355
-
SHA1
aa648ff091e24d8e28fdaaff641def03ede8415a
-
SHA256
d0d99111dfba374ae8983093a3845bb85c2ae8b77039e2b58152c0aaf41f5e1c
-
SHA512
32b88745210582159652cdbb943c5ef0dacf3f6e6e76d11d36e0bd83a39fbb4990c9d1a9b54201c7d81570175f3c24c44c9fb8b3ff7f6180efd69dd10c752930
-
SSDEEP
12288:NGA1bvuw7APc7K2Gmj9a64j8pKa8ZUa8fUd:NGA1bHqz2lj9Fzsd
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 68f90e4762fc46cb098935596078b355_JaffaCakes118
Files
-
68f90e4762fc46cb098935596078b355_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 340KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 416KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE