Behavioral task
behavioral1
Sample
762523c55300855627991318f4dc10f3_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
762523c55300855627991318f4dc10f3_JaffaCakes118
-
Size
1.8MB
-
MD5
762523c55300855627991318f4dc10f3
-
SHA1
532935085a4c6382c0fb8ca90f4c4d1fecc005d9
-
SHA256
495565929ffb3b56bd004224e3abfd49c30ee7289fbec10e82499d26b3c6a47a
-
SHA512
b6080e2a6b86bb912b5289e8d320a42e140a068982191a0299c2a3238850ee865fa68960afa879f8a7d41bd41d6d83e8d0fc8d9090b449bbec26427cc7fa5899
-
SSDEEP
24576:O1wIGOjsuIQctg6ePrTfh2cvxVZMYgc9a0mRk+qkHGYUNr1wgGTb2LSgISdbe+f6:NROX6eP3fh20+YP1SVTb8X9ete4mC
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 762523c55300855627991318f4dc10f3_JaffaCakes118
Files
-
762523c55300855627991318f4dc10f3_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 653KB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 215KB - Virtual size: 739KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX Size: 1008KB - Virtual size: 1008KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE