Behavioral task
behavioral1
Sample
af2c68ca69ab6a889da06b2a8d907241_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
af2c68ca69ab6a889da06b2a8d907241_JaffaCakes118
-
Size
312KB
-
MD5
af2c68ca69ab6a889da06b2a8d907241
-
SHA1
12bad8bfb1cbb0dd762d621be09bc1db144ed498
-
SHA256
45711f08d5bd15a1fec3f771fa9090f5bfa71bde5484fa530f0698a717732ea3
-
SHA512
3f96a2262783cfd52ec7f7b5a1990e7c908ff10c366d6ad04845b92e179e319ebf4f4f5223170b2515043ab94d393964df3709abef70872b93c13ffc139c40bb
-
SSDEEP
3072:hSXzEgcB/g0f2xaxJFjBoBuSuPboDHShtK3kgF9FnpXPchRuZu8wJsc:hSXHV0fIaQwSG43kGpp/czSwJf
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource af2c68ca69ab6a889da06b2a8d907241_JaffaCakes118
Files
-
af2c68ca69ab6a889da06b2a8d907241_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 392KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 143KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 168KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
linghun Size: 125B - Virtual size: 125B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
linghun Size: 62B - Virtual size: 62B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE