Behavioral task
behavioral1
Sample
af2dfca1285eff50d321326dc9d46dab_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
af2dfca1285eff50d321326dc9d46dab_JaffaCakes118
-
Size
784KB
-
MD5
af2dfca1285eff50d321326dc9d46dab
-
SHA1
6551a7feae6bc649c3763a03bd0bc703ad421151
-
SHA256
47aeaecbf41d52c2b8fbf33c629b7dbeca104770f0ef45c2c8e3d02501699c21
-
SHA512
31af5a7711356ba0546444281aca53c0e26e911a0a54f8d6c9b139befb6bedee0808d5883c0571df8025e5719fac62cffbddbb48d03f0279f0aed26f6be53e01
-
SSDEEP
12288:CCeEQ4CrV4v5JUfhHz61v1o0/B0pcCymG+lUO5hqgDUKBcP2cNtKreYzMcfC6Hq:WEaV4bUx61jipVZG+lZAgDxBcucfkrf
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource af2dfca1285eff50d321326dc9d46dab_JaffaCakes118
Files
-
af2dfca1285eff50d321326dc9d46dab_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE