Behavioral task
behavioral1
Sample
f71c62baf6f0fdb196d9e48b5ec418e4_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
f71c62baf6f0fdb196d9e48b5ec418e4_JaffaCakes118
-
Size
784KB
-
MD5
f71c62baf6f0fdb196d9e48b5ec418e4
-
SHA1
82387fd777fb6edf99980c962e6888ac2f9589bb
-
SHA256
e041024002fbada23c923cc560cd26f04ea3549414b6637cd616606671085c17
-
SHA512
52dd1107b1ef0db041e5ea68bb42f8408090e3e9b22d825d8b4a74e51339179ba3d0166d3edd6a452e1fae09970af664252f6dc37003bb6d6bf7f68927d86a99
-
SSDEEP
12288:d1TlaXe3mkUx7Iiv03fJxQpF1bidVH6pMP+u4ZRBN6oMvKrk0sNaJAfVi:d1TlaXe3TUR8fJChwoMPR4CoMvKXyN
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f71c62baf6f0fdb196d9e48b5ec418e4_JaffaCakes118
Files
-
f71c62baf6f0fdb196d9e48b5ec418e4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE