Behavioral task
behavioral1
Sample
876252943ad2fd110f639a29daf9fbcb_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
876252943ad2fd110f639a29daf9fbcb_JaffaCakes118
-
Size
100KB
-
MD5
876252943ad2fd110f639a29daf9fbcb
-
SHA1
2fd1e7952e004f83bce6785506442f4ceb72cc43
-
SHA256
b64a7c912c86328ecbe22ebc0d23ec926f712d2417932a65d3776990683e42ec
-
SHA512
178dd73de56957527def70700dec568050b141d4033724f9946f90f10eae3080895419392bd1e2394cade185df4b405475e6b321344c824d39c1227c2d898db3
-
SSDEEP
1536:/VAAA3PU7pDiRhVex0SUkWTqANibqsNTrNZsE:/VAAAfGDkSgmAgbrNj
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 876252943ad2fd110f639a29daf9fbcb_JaffaCakes118
Files
-
876252943ad2fd110f639a29daf9fbcb_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE