Behavioral task
behavioral1
Sample
a7481f66bb43cf19d0ef8440f082c573_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
a7481f66bb43cf19d0ef8440f082c573_JaffaCakes118
-
Size
6.4MB
-
MD5
a7481f66bb43cf19d0ef8440f082c573
-
SHA1
d454e73e1f62a91b4a872bc73a5afce6cf1a9374
-
SHA256
0a196b843d71d040aa9626f5c6806293335ddd35be7c72b3975ceb403152765a
-
SHA512
1a9e8044e51254da449557d82524539932a6d565a187e5d687721fb6d080b3ed5b382e218f92c7287036378bcdc1d25318552072183759324fe858cb137cf8c8
-
SSDEEP
196608:yE1u3hNdl5OZ1g0dlqS85+dl5OZ1g0dlI0ej1dl5OZ1g0dlqS85+dl5OZ1g0dlO:Nu3xqgZOqgZjzqgZOqgn
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a7481f66bb43cf19d0ef8440f082c573_JaffaCakes118
Files
-
a7481f66bb43cf19d0ef8440f082c573_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE