Behavioral task
behavioral1
Sample
7469ea6803e40220e2ab3ac1d8907ab0_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
7469ea6803e40220e2ab3ac1d8907ab0_JaffaCakes118
-
Size
2.9MB
-
MD5
7469ea6803e40220e2ab3ac1d8907ab0
-
SHA1
d7387f174ea95627c3e9211c2d25d67a56bf7096
-
SHA256
03ebe800d6b0fa63280b1df15c4261cf47f4c70935be2fd0b1d58036df45e384
-
SHA512
ff7ba016b17f9e8b37e68a5c9feb0ba28f5a1ebd3256a82a3b0f539f10e484816513d1023295c1fce7c1ccfb588f689bc88c1414ff5207a18b407badfe23e5b3
-
SSDEEP
24576:2+Jzkclg9YKUIg5bvSXPjRe8E9G0hUnYKUIg5bvSXPjRu2YrMvYKUIg5bvSXPjRT:2+Jm94ZlcRr54ZlcRZv4ZlcRr54ZlcRL
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7469ea6803e40220e2ab3ac1d8907ab0_JaffaCakes118
Files
-
7469ea6803e40220e2ab3ac1d8907ab0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 588KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 195KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 107KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE