Behavioral task
behavioral1
Sample
722d36149441de64f7d2ff5b16918332_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
722d36149441de64f7d2ff5b16918332_JaffaCakes118
-
Size
5KB
-
MD5
722d36149441de64f7d2ff5b16918332
-
SHA1
b65672f5497c19c1dcf5ff54523360457a32fdcf
-
SHA256
6dd6ac52ae110c7edaec78184e93bf21ac429106f37cc339801a01ec337be288
-
SHA512
0f76ed1b00ac057abf23f60260550fd375de29d00a98d81bdcdbfeefee1a9e59c5acf44e40cf253a1e1a625beb175aa275424695c8bef4ace362494576a45ebb
-
SSDEEP
48:KInglfwW5BJVhV4GWqHsO216ucIJUUKPbcs4inhbeBLcKk9gZnwNxDbGReO/Z7mH:wfwWhVTIO86WZVs4iaoKkNj6NB7W0/k
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 722d36149441de64f7d2ff5b16918332_JaffaCakes118
Files
-
722d36149441de64f7d2ff5b16918332_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 112KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE