Behavioral task
behavioral1
Sample
823614ae8b8994741cf0d93d0ac582cc_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
823614ae8b8994741cf0d93d0ac582cc_JaffaCakes118
-
Size
116KB
-
MD5
823614ae8b8994741cf0d93d0ac582cc
-
SHA1
63ec72b31e244a84eb1c39dedcc5e3b97f626ad7
-
SHA256
1b2a566f4f45c14de5ebae85a24c94f0183a7c01f7f1c49875b15e859fdc2e83
-
SHA512
5c952ec425799077ff4098df928c9e20b40959f757f2782491b1a2d9dab2c675b725309d4d42130941fd7baa386242481a578f391172446fb6ca8e2ee36378e0
-
SSDEEP
3072:GokmToqSin8I0dJGZwkYITkCz8zAqByn10rzEout:OmTe2Z/YDCozNDr4oS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 823614ae8b8994741cf0d93d0ac582cc_JaffaCakes118
Files
-
823614ae8b8994741cf0d93d0ac582cc_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 52KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 112KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE