Behavioral task
behavioral1
Sample
017c2789cedfa909b169bcba6d7d5b0d_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
017c2789cedfa909b169bcba6d7d5b0d_JaffaCakes118
-
Size
256KB
-
MD5
017c2789cedfa909b169bcba6d7d5b0d
-
SHA1
c8f88fffe881e3da75fba772207aa233d5fa0361
-
SHA256
d31ca606b66bd236b7d6e5a745beb3406eecae0c19b14a26435cd75868b9d658
-
SHA512
52256dbb05360bcc52d29a73cc238f30c7d50ab727866770616a8b330d1955ad5cade0226a1cd82280cf931fe12d3c88c53ff8172b06b3dd1150a0cc3888f4fe
-
SSDEEP
6144:Z6vsPXSfKl41K1CN5nNYETF/NVXnV9V8QQI2sXSBNAoSv:ZWswO1enNBF/NVlz8VI2/moSv
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 017c2789cedfa909b169bcba6d7d5b0d_JaffaCakes118
Files
-
017c2789cedfa909b169bcba6d7d5b0d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.8MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 252KB - Virtual size: 252KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE