Behavioral task
behavioral1
Sample
c835a548aa46a6ca1b0b10b1bb846119_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
c835a548aa46a6ca1b0b10b1bb846119_JaffaCakes118
-
Size
56KB
-
MD5
c835a548aa46a6ca1b0b10b1bb846119
-
SHA1
278fcc1b4e37b73f951e7b1abcae851a8254f709
-
SHA256
d540bdb94e2a6dcf645dbccb2e35405e4312fd417de7b0b1668ec929ddb57920
-
SHA512
211cfa5b206db72701255081d5d410c214d64fd7840e2ce4fbbf7a6e30eddf78f3151a814e359537987374db0c19bc0348aef8a82096b40b1915589417864d99
-
SSDEEP
768:AyHxe3EdeqdC/dddVR0syVaC0G6pYgq/SzdgVd4hGvBQolqW9QW9z6hc6XUYH81L:nHbtANmMC0G6Yz/9LZltOW9z3MmN/
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c835a548aa46a6ca1b0b10b1bb846119_JaffaCakes118
Files
-
c835a548aa46a6ca1b0b10b1bb846119_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 51KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.jgd Size: - Virtual size: 1B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE