Behavioral task
behavioral1
Sample
afde976ad6b79d6a6ded6af6e022f44e_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
afde976ad6b79d6a6ded6af6e022f44e_JaffaCakes118
-
Size
501KB
-
MD5
afde976ad6b79d6a6ded6af6e022f44e
-
SHA1
9080f6ea7dccfc2cc27e05d674999555c76d68e4
-
SHA256
6e584e2b49eb1716e743f1a235ca2742e916487e357d76e4605315de89e9f863
-
SHA512
bc3f0c911e88bcd620cc0edc0711da598588c873314d49b2fc693c413666358c275544748c3600d38a2498f5fb3ec64ce18edb5371d512f60126f0210d486329
-
SSDEEP
12288:qlvhUnKcUqx4JXsmCiDDTVL05lBGrBh6uART/+N7RF:UvQRSXsm3TZuGzvWL+N9
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource afde976ad6b79d6a6ded6af6e022f44e_JaffaCakes118
Files
-
afde976ad6b79d6a6ded6af6e022f44e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 268KB - Virtual size: 268KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 178KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 54KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ