Behavioral task
behavioral1
Sample
a4fdffc1d0e740ef36a83aaddc1ee48f_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
a4fdffc1d0e740ef36a83aaddc1ee48f_JaffaCakes118
-
Size
755KB
-
MD5
a4fdffc1d0e740ef36a83aaddc1ee48f
-
SHA1
63cc6cd9431766366ac5f07409d1cb01f6a866d8
-
SHA256
f77cbc762afc5083f91dd666641ac4c56ca583a8ed907e86ac20edd25cb65397
-
SHA512
dcc21808a4437f91a9fea671fd37928f5ba88d172d3e50ffafef193c69dd43bf794d56a66c681412b030eed9b25a320df62498e61debb5bff5db30f9a8f5b45b
-
SSDEEP
12288:vBzzB4sANifFRnYNdKVv5PBzbkfote2QSAhUm2xAE9EY:vBzN4sANidR3DJ8oteUnbqY
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a4fdffc1d0e740ef36a83aaddc1ee48f_JaffaCakes118
Files
-
a4fdffc1d0e740ef36a83aaddc1ee48f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 280KB - Virtual size: 280KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 388KB - Virtual size: 388KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 86KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE