Behavioral task
behavioral1
Sample
f0c55b28c75baee824cbe400c45b85f5_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
f0c55b28c75baee824cbe400c45b85f5_JaffaCakes118
-
Size
64KB
-
MD5
f0c55b28c75baee824cbe400c45b85f5
-
SHA1
2c23ed4502e78a499faa02505104ce74b0c81f14
-
SHA256
44c19371bf3e9c291c8c373052fb84f5ec7628ff8d2cc578a36e157af199e8c1
-
SHA512
575b3e63698a22ea398cc9636a4d4b2eb7c56fcdd543baa3184a14ae9ccdd0365c7fea4a2d5452f72956f50d45a96ae3808cd23b6b863fbf3e0836867f4b3d78
-
SSDEEP
768:mDjVLjah/kc61/GnYT0mR5JYdUhp1HH5eu+6q2mdrPByiHRQ3D3MumzXcKPtUIMq:2LehsYU0S5iwL5efrPTIDcuB
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f0c55b28c75baee824cbe400c45b85f5_JaffaCakes118
Files
-
f0c55b28c75baee824cbe400c45b85f5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 672KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 59KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE