Behavioral task
behavioral1
Sample
962aaa62f3eee051fbe10061b7616be0_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
962aaa62f3eee051fbe10061b7616be0_JaffaCakes118
-
Size
201KB
-
MD5
962aaa62f3eee051fbe10061b7616be0
-
SHA1
666a7733eab7dd2ce87b67bd2c72985f5465407c
-
SHA256
3466325b3e252c8b51782d69a970d5e26362bd21ba9ba252477ae83e23cca176
-
SHA512
08abb2248d3ad7c887f83ae3e16017fc70cc0a1457588f69120f7c8fcd6775b6e50aa004e3ee811ab900a9bb2d91416c25320392bc30ffa29c697cc685484046
-
SSDEEP
3072:uwYK1ZIT6ygsvwHTlrQpCFle1Uisoqn3WyYDmg1sx/Tr6ECF9L5AQHxtFTqnVnA:Q+bsvwprHFdxoqHYKgur6E6vBZ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 962aaa62f3eee051fbe10061b7616be0_JaffaCakes118
Files
-
962aaa62f3eee051fbe10061b7616be0_JaffaCakes118.exe windows:4 windows x86 arch:x86
647b2d25b4821905b4195ff7a6455b54
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
LoadLibraryA
GetProcAddress
Sections
UPX0 Size: 512B - Virtual size: 340KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 175KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�������� Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE