Behavioral task
behavioral1
Sample
afd23cbcdb440a44e15a363e213ec9f8_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
afd23cbcdb440a44e15a363e213ec9f8_JaffaCakes118
-
Size
186KB
-
MD5
afd23cbcdb440a44e15a363e213ec9f8
-
SHA1
33566a0e14b921b7cf882ed0876e0b35b0572619
-
SHA256
90d4c2d1bbb7dda9eb24200a7862bff347716e5ceff26871b4409be7596f35a6
-
SHA512
f4810f051178ca1039d64c91fb2514583d12e0115d1d6179ed9ff085bb2df0b930545077777b76b30823d2d7ef4e1a79a7d2c0ac6d13307f21a0c58026f6b0ce
-
SSDEEP
3072:V/rqUgy9//NlhPcGKIKsghEjC5cCxmFqV3TqdPDsCbMIo7mBefamZhp:V/rqkJ9dKb7yjC5h+qVedDsCgIw3CIhp
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource afd23cbcdb440a44e15a363e213ec9f8_JaffaCakes118
Files
-
afd23cbcdb440a44e15a363e213ec9f8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 92KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 32KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata0 Size: 144KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA