Behavioral task
behavioral1
Sample
af1fb5bb0a58681f2135784524b84ea7_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
af1fb5bb0a58681f2135784524b84ea7_JaffaCakes118
-
Size
784KB
-
MD5
af1fb5bb0a58681f2135784524b84ea7
-
SHA1
e6a7a13f818622b7124323184fc25998b913df52
-
SHA256
48ca218ee3ea5a1814ef62e5e28e11a69477b7cc8881225534de740210eb34f1
-
SHA512
29a1659733ec01e99d3250dc60ee59b573bc2230c87ee4d26cf0486d990c4dc0b63e67eb5863bfd895e68fb8a272e5c699041a25976f19c58576d2a9507a6244
-
SSDEEP
12288:SPO9hdWmGEp4yFfrYMVrPO/CkDmLU/tLMgtsMW+8j8BYctPJFGbmNAr:SW9rWmvprf8MRW/n0U/8MmAecDFGb
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource af1fb5bb0a58681f2135784524b84ea7_JaffaCakes118
Files
-
af1fb5bb0a58681f2135784524b84ea7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE