Behavioral task
behavioral1
Sample
af10f27c7716982aade3fdda3d69fddd_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
af10f27c7716982aade3fdda3d69fddd_JaffaCakes118
-
Size
275KB
-
MD5
af10f27c7716982aade3fdda3d69fddd
-
SHA1
054a2ac1af3d0cab78d1df01d3fe28eb93175a60
-
SHA256
79e93c5456f3d2dfbb2f06b5656bad3282f54a8a342a57f8fd8c9760552fa9c9
-
SHA512
0d2726c6e95ac1e1e83f34abe7b19bfe792e43d63d25b76d7cdaa791eb1f61e9076592771f33ca11348ca586b055f5cef58c1a38c48d8da9d73bcd2832ce9c06
-
SSDEEP
6144:A0DUMb3M1xXIvDhZqmCKfQYQRwZy7Uqaa377oS:AYTb3MHUjRHWCywO/oS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource af10f27c7716982aade3fdda3d69fddd_JaffaCakes118
Files
-
af10f27c7716982aade3fdda3d69fddd_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 156KB - Virtual size: 156KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 117KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE