Behavioral task
behavioral1
Sample
c849eb625cef153dd26ef431cb76978f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c849eb625cef153dd26ef431cb76978f_JaffaCakes118
-
Size
149KB
-
MD5
c849eb625cef153dd26ef431cb76978f
-
SHA1
42ede92bc7b2c0e69a0e3dd1aba5cdc07c8dcb50
-
SHA256
a59bb57fca496d1e828a5487a73f81d9bb69a278dc7eef7a3fe317fb01b9d51e
-
SHA512
7b68a5407ccd7b26ddab03175a4ac85856196ef7cc4e8ac40425f5014ee2ba373fb1506aa85a16f13de2bfab1d620b1f65fc040adb82cc38a59eb5f52268470b
-
SSDEEP
3072:qmdkGb4eHAM5/CpwmxYob+ZFycMU8QP7Y0B8VI55IgVVjt5zml:q0kGb9gM4pwqL4yctr7Y0BeI/FVV/C
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c849eb625cef153dd26ef431cb76978f_JaffaCakes118
Files
-
c849eb625cef153dd26ef431cb76978f_JaffaCakes118.exe windows:10 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 284KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 147KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE