Behavioral task
behavioral1
Sample
823da08d99cba01d77b3ca6b6ef0849f_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
823da08d99cba01d77b3ca6b6ef0849f_JaffaCakes118
-
Size
404KB
-
MD5
823da08d99cba01d77b3ca6b6ef0849f
-
SHA1
abdae38e0eb584d099c87895c2dc6b047f002013
-
SHA256
2eabdfcf8ef14b86daddcd7d066d4ba7ee2376fea866ad7c132d53fcd8ff34e1
-
SHA512
bde21063687059476351efdcea2d392411c4929e140397106784c19055123e6c17744a50bc555bccd2392f40fecf8f335c4c4e50b4a78f7bd3685f743784fdf8
-
SSDEEP
12288:ngrkbuawlUZF8HZ5YN4B9rC8jBRqtJPXH3qyKgxW7oS:RqazP8HZ5YO9rC8j/4PXH6yFx
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 823da08d99cba01d77b3ca6b6ef0849f_JaffaCakes118
Files
-
823da08d99cba01d77b3ca6b6ef0849f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 876KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 397KB - Virtual size: 400KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE