Behavioral task
behavioral1
Sample
74a418cd1eafaa540853dcdb2d4fdabd_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
74a418cd1eafaa540853dcdb2d4fdabd_JaffaCakes118
-
Size
784KB
-
MD5
74a418cd1eafaa540853dcdb2d4fdabd
-
SHA1
d57a5f5eb4a1ac7a19b59c8f6fa228a22fab4267
-
SHA256
b3b02d621f57d65e67254a3798cfea3c11383d1966d479b3526d7f9f77c50d9a
-
SHA512
fff9e1fe8de4fb9844be2d54016eec2812e53611387b78ca6823a74b9792fbae22c16196dc77be365cd7d186dd8541d82cb10f6f58005830627e9e512ff30823
-
SSDEEP
24576:/X+DjPRA+gZabwSiUu1W3gGWPq7PigHdMM3:f+nPo4bAUuMWPZ+dMM
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 74a418cd1eafaa540853dcdb2d4fdabd_JaffaCakes118
Files
-
74a418cd1eafaa540853dcdb2d4fdabd_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE