Behavioral task
behavioral1
Sample
786d7d2ab426c417f337c475a57d7fb9_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
786d7d2ab426c417f337c475a57d7fb9_JaffaCakes118
-
Size
762KB
-
MD5
786d7d2ab426c417f337c475a57d7fb9
-
SHA1
c591444ade46b841bbeb90fd7d45b34a127ffdd5
-
SHA256
b25552218a3032e6f872b92dc2cfee828c1dc5953439e2c190aa37dbb0e54189
-
SHA512
dbdfd4a92eba3e6cf49492330a88b61839e3c8e7bd38d4c153c6f791ca3842fd75154a1a4d0d13055a47b81e1fb6365aa12cb4e35edb4ba7f642b3e26dded498
-
SSDEEP
12288:gUHnB++nDyUJnn2aLs8LLgfKAr6VVb2CTokRGGS1upwefOT5wX2i:gSB1nDywn2OHPY63lokRGfojOTe
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 786d7d2ab426c417f337c475a57d7fb9_JaffaCakes118
Files
-
786d7d2ab426c417f337c475a57d7fb9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 940KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 347KB - Virtual size: 348KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 241KB - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.qnk Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE