Behavioral task
behavioral1
Sample
ab79c81e3409e4c6c24ef3c4419c1632_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
ab79c81e3409e4c6c24ef3c4419c1632_JaffaCakes118
-
Size
1.3MB
-
MD5
ab79c81e3409e4c6c24ef3c4419c1632
-
SHA1
52517174facd4ebce1fc388246aa7e63852f3073
-
SHA256
0a39adac8343d47374d2f49c21401dc212cec93c7ca02c5d7f58b9626b010f4e
-
SHA512
f4fbe76ba5ed617099013b5afe567a5826c3f93e78033499503b3679f28d163cea89feefb5906325acdc70899a777457ebb8d883e0c4d53b90ca8b27f820eda7
-
SSDEEP
24576:7otz++3BrMTFO9lio308rQRc4DPY9olCG2fxHKA7LKCbxyAyO:7O++3rbbr4Y9o8XfxHjq+yA
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ab79c81e3409e4c6c24ef3c4419c1632_JaffaCakes118
Files
-
ab79c81e3409e4c6c24ef3c4419c1632_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.7MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 172KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE