Behavioral task
behavioral1
Sample
7813c28b51f8a613310342c756213553_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
7813c28b51f8a613310342c756213553_JaffaCakes118
-
Size
35KB
-
MD5
7813c28b51f8a613310342c756213553
-
SHA1
95487739b8b10d7ec6e105fc240a342e55d111ff
-
SHA256
43e93e06d7e3c11a81203e71e244af31ea64fc4eb19375883350750daa7a56ef
-
SHA512
ae235676285951259d4bd30d0685531c9e1325127308ede85a6170618f2f27981765e7abc1ce4b86eecf00b0fe1573a091a926403cb5a9fdb5f794c5605887af
-
SSDEEP
768:dFxG0B81QVuNQjVlhlcifS/IT3/lEW32b3dp7Iw:djdu+jzcOT3/lEW32b3dp7Iw
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7813c28b51f8a613310342c756213553_JaffaCakes118
Files
-
7813c28b51f8a613310342c756213553_JaffaCakes118.exe windows:4 windows x86 arch:x86
d76f4237a8ae158292f09835997a1d9f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateProcessA
Sections
UPX0 Size: - Virtual size: 212KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
UPX2 Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ