Behavioral task
behavioral1
Sample
f520929ab05c298d7e2c29cdc9fc00cf_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
f520929ab05c298d7e2c29cdc9fc00cf_JaffaCakes118
-
Size
288KB
-
MD5
f520929ab05c298d7e2c29cdc9fc00cf
-
SHA1
71ead02588b24a3aa71420f4975937d33900f436
-
SHA256
005dba2a89d35421dfa6278bd2877a8211e5545b97b36951d67d7202d1b5c2a8
-
SHA512
38836c8a5771dbaeb2a5c0dc9bdcd58a311b41cce9aa1fc832a1d024577f35071cf23cf6b3ee0069dbd29f6fd0baa5271de1dba70a83c0ca643cbd6b99f625e9
-
SSDEEP
384:f6KkdmP0kvEboz8aJqVHn6GHWj85Rylc1/lDE2BP55IwssypnD1aUxt3J/bNeLqQ:f65+cQ4VHCeMSzBPLWsaD1aqtBNEaoZD
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f520929ab05c298d7e2c29cdc9fc00cf_JaffaCakes118
Files
-
f520929ab05c298d7e2c29cdc9fc00cf_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
gzm0 Size: 272KB - Virtual size: 272KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ggzm Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE