Behavioral task
behavioral1
Sample
851c238e9abf05001edaa00b58ab252c_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
851c238e9abf05001edaa00b58ab252c_JaffaCakes118
-
Size
2.2MB
-
MD5
851c238e9abf05001edaa00b58ab252c
-
SHA1
c174930025775d6ed3e59b43886d7bc45764421f
-
SHA256
fafb556bde48c1892a2885d8855486029228f1bf0cbfe8c6a5a56a875cd8529a
-
SHA512
21070dcc1d0ad7aac388a5c027a103e6a1100327f99e25a090815a820e6ed7660706595596a08a8c5242ec1ae3da82c3779c512bb7bd290570152fec532f53c6
-
SSDEEP
24576:eJR626/YvfrMW/0CvFYIFabOcthgKGSbeL8ujHo4omnkViUBrxQ/zkl2jzgdMEP:I6vYvfrMEXuCetJC8u04fkViUBrSNX0
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 851c238e9abf05001edaa00b58ab252c_JaffaCakes118
Files
-
851c238e9abf05001edaa00b58ab252c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 44KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pebundle Size: 690KB - Virtual size: 692KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pebundle Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE