Behavioral task
behavioral1
Sample
712d30ad58778b87fe752516d1d53a05_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
712d30ad58778b87fe752516d1d53a05_JaffaCakes118
-
Size
192KB
-
MD5
712d30ad58778b87fe752516d1d53a05
-
SHA1
2630c545e1f9938e45d40ba8ebffe84debbcf88a
-
SHA256
1c400d1dfda59512c1b18bab309dd2e421bc3ea2f2aeb05524e64b6281da25b9
-
SHA512
aaa729274a7dffe66b470b0f65ce5d82318a32d06e98857f7b13b2232052ce8d1b00266e3dd41625162afae12afd97b2eaa2cf0dba27744a5c2373a50fb6b165
-
SSDEEP
1536:CG/k4lzZ/JA3D6TDuWGzI/QfZ+o/mDNqY8ht35RcpBPdD3pNSFoLdFdquCFrOFeu:bk4lzJ2E5lTqffYL3pNSFUtCF6FLt
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 712d30ad58778b87fe752516d1d53a05_JaffaCakes118
Files
-
712d30ad58778b87fe752516d1d53a05_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 128KB - Virtual size: 128KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 50KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE