Behavioral task
behavioral1
Sample
762686507219d101c8ed3ac4be689673_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
762686507219d101c8ed3ac4be689673_JaffaCakes118
-
Size
442KB
-
MD5
762686507219d101c8ed3ac4be689673
-
SHA1
79f569265cc88bf3e77d1c8c315ac1fef1a214ad
-
SHA256
6f80c04820e11fc1348621c92448853ee23a6ff531b86d8f5cefdbc38eb1877c
-
SHA512
3c61478e58c6fedd504ed7c40dcaa6020644e5a229ea8f42e314eb6c93f441fdde30ed0a6668ad3d212b76932a06a9b4b0c3a1413d430645eb611e56cf6f093a
-
SSDEEP
6144:l5FkEHLKw3sVbCq953l8iFkrynAjY9yjm4dwxTI744aijQudthJ1y/Z:P0ww53l8gnj9yoVI5agthJI
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 762686507219d101c8ed3ac4be689673_JaffaCakes118
Files
-
762686507219d101c8ed3ac4be689673_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 1926.3MB - Virtual size: 768KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 417KB - Virtual size: 420KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE