Behavioral task
behavioral1
Sample
afeafb4499c5cfb85323c77e7c0d7790_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
afeafb4499c5cfb85323c77e7c0d7790_JaffaCakes118
-
Size
40KB
-
MD5
afeafb4499c5cfb85323c77e7c0d7790
-
SHA1
6c96433bec388edf6069def179cd69157de2c29b
-
SHA256
fba9f05e430c0ea87459b0c04e4646137c7c00b8f3f3546bf24619cab7a5d7c5
-
SHA512
4c0529c6b4fe63bf21eafa5a6301dddb459412291659917b9ce1eb6db11d5e7109bc69850a68a69b6dee64eba0e59cd4d5eac41a18bd183aa97d12e2f91933f2
-
SSDEEP
768:BO1fYATHIcXpyVT4uQD8WripwCjvPqMSuJSx9ePgcpsMVX:BOJYkHIcZyhBSmjjvPqte2I
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource afeafb4499c5cfb85323c77e7c0d7790_JaffaCakes118
Files
-
afeafb4499c5cfb85323c77e7c0d7790_JaffaCakes118.exe windows:1 windows x86 arch:x86
cb48822d4f6af1d36a44f1d7f3aa3efd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GlobalFree
Sections
UPX0 Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE