Behavioral task
behavioral1
Sample
722b50629257bdd477322fb1d9e4cb27_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
722b50629257bdd477322fb1d9e4cb27_JaffaCakes118
-
Size
784KB
-
MD5
722b50629257bdd477322fb1d9e4cb27
-
SHA1
f1e33ddd6b293234bbfb8143ffe1f1d76c4cba62
-
SHA256
958f9ff35a9a6a17c94a7d7019cf1aa6058d89b4779a17493931662f12aa8000
-
SHA512
5e6c2c86a8f2043d6fe514bf8407fab913b36395f2d0ed7dbe2b371a846ae86a1ca866599ab4acaf3296f861d2b6e0fae5908712325c2a50cdbf287f85c470b7
-
SSDEEP
24576:EfJ4i3YxNHX0lV6Bjq6x6bLjSwJX6fmxC:EfJ4c4NyUqPSwJKfmx
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 722b50629257bdd477322fb1d9e4cb27_JaffaCakes118
Files
-
722b50629257bdd477322fb1d9e4cb27_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE