Behavioral task
behavioral1
Sample
ff7334db5b7df016a53d5dbad054b0b8_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
ff7334db5b7df016a53d5dbad054b0b8_JaffaCakes118
-
Size
56KB
-
MD5
ff7334db5b7df016a53d5dbad054b0b8
-
SHA1
30485df1dc7ba8e176b55ec85e599e4371a60e73
-
SHA256
b84f72b99927eef31f182dd7bf806a6d5247078f91ba2bb3272cb84f58eeb573
-
SHA512
3e54637be939380e2e7d1a2f0d0d564b0f4dfe75f0c6463687e4bd31f714db339e68bd182795e16aa215f9c415561f7d99b5f7a2ca47ef1f6ebae858b738fa4c
-
SSDEEP
768:swrIqUYZZn5iB9U45mIs1FbQWzg0u2aZgvNN:Yq1Ti5s1QGgLeNN
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ff7334db5b7df016a53d5dbad054b0b8_JaffaCakes118
Files
-
ff7334db5b7df016a53d5dbad054b0b8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE