Behavioral task
behavioral1
Sample
899ae40e1c6048f94db51dfab9eeda92_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
899ae40e1c6048f94db51dfab9eeda92_JaffaCakes118
-
Size
347KB
-
MD5
899ae40e1c6048f94db51dfab9eeda92
-
SHA1
cb34178bb583ea9810b5b3f8c257886d0f508c31
-
SHA256
5ade08351dd9757e1b76b67c4c8156d2611813a1973747836418e753561b83ff
-
SHA512
147a88b4fbafe42385ed96d3cc8a7de135e09b4acab79f3a1371dde04c9b55d5ac942405c0529e85e9737ceef3a9771a62b70d8ccc9caf9af4194f189e450586
-
SSDEEP
6144:o8yZw0EMTNHw7Ip+rKUEqpjyfe03qJf1zw4T/+8zXTfwcDKl+oSU:xZ0btw6+rK5qkfe03j4j+cD4choS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 899ae40e1c6048f94db51dfab9eeda92_JaffaCakes118
Files
-
899ae40e1c6048f94db51dfab9eeda92_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 708KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 324KB - Virtual size: 328KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE