Behavioral task
behavioral1
Sample
1027f6dea00c9c9952ab5b0c24420e70_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
1027f6dea00c9c9952ab5b0c24420e70_JaffaCakes118
-
Size
320KB
-
MD5
1027f6dea00c9c9952ab5b0c24420e70
-
SHA1
4120b431067fa0b9b5d623f4f0413506ffb62991
-
SHA256
d718851ad1b9b985b477c188f23e0018599f42e7b3e0460b3d9b787251b540da
-
SHA512
3b83f45449be899fbcae8409d9c2417a832caa2a39c58e13a08567fcfe8127eca728e36d186ea52747ea073d600ce4c34ce95f95c870b04cffea84409a0e4228
-
SSDEEP
6144:bkyDdX1moL4V2cWOPrRaO4PS7mHgC5GIaJfQd0Nm6Nuau8Am3qfwwYv:bkyDpQ1G4R/+SzCGbNm6NuatA9fYv
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1027f6dea00c9c9952ab5b0c24420e70_JaffaCakes118
Files
-
1027f6dea00c9c9952ab5b0c24420e70_JaffaCakes118.exe windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 472KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 232KB - Virtual size: 232KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE