Behavioral task
behavioral1
Sample
af8336e0b4df4b30560d44c5bec58157_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
af8336e0b4df4b30560d44c5bec58157_JaffaCakes118
-
Size
236KB
-
MD5
af8336e0b4df4b30560d44c5bec58157
-
SHA1
9f86c43f2ded823c25f9d91a67ff2d71fd5c0c64
-
SHA256
3dd4dcc2831b6488d0b102aeee6c6a1ae88ec325eabbe5f3bdc0b7eb01f4a8c4
-
SHA512
7af19deb84e97e156710c7235ea83bcef1adc74b59e6afba4bb264fd99613d73f12b57469b018b259b4e845ed408194cd945815633b74aab72a78c74bac419fc
-
SSDEEP
1536:GoLklb7XZRhQ7wIIa3ZLh0tJgXcGSwF1KsWa1ca/0aN1y4lJfKTq4UCz049jXg:GoEYwmZeqblWycaLi4lB6UC5k
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource af8336e0b4df4b30560d44c5bec58157_JaffaCakes118
Files
-
af8336e0b4df4b30560d44c5bec58157_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pebundle Size: 61KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pebundle Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE