Behavioral task
behavioral1
Sample
699b190c92041f92b2812ffe1fd12674_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
699b190c92041f92b2812ffe1fd12674_JaffaCakes118
-
Size
389KB
-
MD5
699b190c92041f92b2812ffe1fd12674
-
SHA1
e8092879999565e9ac334f306e912294f6512f77
-
SHA256
6ed303c99a5a765c54465d31b6859005c0dae075a810f819a1262fd9380774d8
-
SHA512
553d6b62db504df93e0bc9039d8e55239ab8cbdcaccee01cd3488646b78de37c6c539926300512b1c8e1efea93191a7e34e34dd84950e1fa253ea5795082e927
-
SSDEEP
6144:vft6OWiqt0ZCLq36pGZCcjKpevhIhG8N/ba+:3t2i8cv3WGZCWr5IpN/O+
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 699b190c92041f92b2812ffe1fd12674_JaffaCakes118
Files
-
699b190c92041f92b2812ffe1fd12674_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 94KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 53KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE