Behavioral task
behavioral1
Sample
daa662c24485bfea892c0c9c2426fb7b_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
daa662c24485bfea892c0c9c2426fb7b_JaffaCakes118
-
Size
534KB
-
MD5
daa662c24485bfea892c0c9c2426fb7b
-
SHA1
87fafcf49fdf9280bde901e9d59f679ded095d05
-
SHA256
a65bdea7b799443c4b0ba31e96ffe24cd1451fe920d23336ab0b2857107712ca
-
SHA512
b2287769f3baddcc3e1919d48d01e56784f6f606d52f494800608be8f2d638162c8c148e8daa95ecab8bc26bab2e066a49814aecb93995c5c7a4b5c0037b3e29
-
SSDEEP
6144:C+l5kk8sBMG4p265nDrQk29Sb3zXnGFWaSgRQXI+qtEPzcTgSfvWCFE/WWHHI8nY:NvEc4zWkaSvXI5tU4TgwWhWWHHa6V5Qb
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource daa662c24485bfea892c0c9c2426fb7b_JaffaCakes118
Files
-
daa662c24485bfea892c0c9c2426fb7b_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 368KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 529KB - Virtual size: 532KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE