Behavioral task
behavioral1
Sample
f07a67df77cb6d11c3b70357819789c9_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
f07a67df77cb6d11c3b70357819789c9_JaffaCakes118
-
Size
709KB
-
MD5
f07a67df77cb6d11c3b70357819789c9
-
SHA1
b2a52221f0a440570024c77af2616512bd17ebc2
-
SHA256
d7ee9c76371a3ed48c3674beb332c0fa7399e2876ea67eea61838b9af5bfe3b8
-
SHA512
22029a59114a2116ff7ec1ad00198a32277e2a5b78ec473de3e68d7f007cc78a54a7bb576998731f42944de1fad81e51e1ae5ad82fa7d4bb136a1300867a9dd9
-
SSDEEP
12288:gNqIg/Qwe6C6RHAgPHKCFMv+aR86+HIlwcDVJPaa79kpa3788WQENA2joSvRWf:g4nIwe+g2vXweHIXvaww8WFA2vy
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f07a67df77cb6d11c3b70357819789c9_JaffaCakes118
Files
-
f07a67df77cb6d11c3b70357819789c9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 647KB - Virtual size: 648KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 61KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE