Behavioral task
behavioral1
Sample
7400259a75e9fd5cea722bb3bd4ee42b_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
7400259a75e9fd5cea722bb3bd4ee42b_JaffaCakes118
-
Size
12KB
-
MD5
7400259a75e9fd5cea722bb3bd4ee42b
-
SHA1
53c03e9b36a4de2f7f02bfd1e5cf5a7172f73483
-
SHA256
e62061a7d12a77adacb98440a7689d76ec71f09ed802724862c3051ae7ae35bb
-
SHA512
a74d62fcac2e901e05c212dd3c46936f45d04abda6746d7f3322ea65d6d44f6c0ea9e55af1d2b35dabe2301271c95fa4f231ea96ace31515dff9b27d85604763
-
SSDEEP
192:TeFpBoVLrmpvBkoKL3yQxAKym3BtkLYul7L9AO4TZPpWpH3/vzF0oEM:OpBoVLrm1KLCQqKj2XlP9ETZEHH+TM
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7400259a75e9fd5cea722bb3bd4ee42b_JaffaCakes118
Files
-
7400259a75e9fd5cea722bb3bd4ee42b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE