Behavioral task
behavioral1
Sample
884015881e281847f8d2f6da9cf1005d_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
884015881e281847f8d2f6da9cf1005d_JaffaCakes118
-
Size
1.2MB
-
MD5
884015881e281847f8d2f6da9cf1005d
-
SHA1
0610c91d507517ae11d027dfcd3cea9302a82c63
-
SHA256
77f137e77d88dc7eadb1f3cade940276d57bed0298272b594c8852cf1f1da088
-
SHA512
6bc4454287dc6d033eee0d92dfa26e407442cc4ac6b33841b9e9e0575a325baff9f5c52e5f2f2c8c26dacdb74e41ea60f489a58a1ef8223abde5db9f30ed230f
-
SSDEEP
24576:Tl7NksbF11OX1O75XFum/jI9fLmIKTPbbC1gPtQBt7IQ4geJWwn:vAX1O/um/6L4T/CePtiFx4JQwn
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 884015881e281847f8d2f6da9cf1005d_JaffaCakes118
Files
-
884015881e281847f8d2f6da9cf1005d_JaffaCakes118.exe windows:5 windows x86 arch:x86
7c4c46ba561d4416cb5ea7f9edcf51fe
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32 kernel32
Beep �
Sections
UPX0 Size: 10KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ