Behavioral task
behavioral1
Sample
c844f9edd306a76b2ee2c1c3321eb736_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
c844f9edd306a76b2ee2c1c3321eb736_JaffaCakes118
-
Size
26KB
-
MD5
c844f9edd306a76b2ee2c1c3321eb736
-
SHA1
4d5a1ef07875fa8b5c8266414c37788af28b5462
-
SHA256
b12356b78d58aafe73cfa3de26913095708ad6a494adc1e78512e6e93979878c
-
SHA512
62479c6d7a7cd302eff07de051b6b42aed4981e94e30c1f331d07490ecfe299ac6a8a944c9e93475b8d0235474f8c733aa418cf22cda91f27d0ac6c946fa94e0
-
SSDEEP
768:xRGuY2P0Vo6r7SiAwyrMRjbAX9bnbcuyD7UOKL2O:HPcVo6r7S/rabAXJnouy8n2O
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c844f9edd306a76b2ee2c1c3321eb736_JaffaCakes118
Files
-
c844f9edd306a76b2ee2c1c3321eb736_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE