Behavioral task
behavioral1
Sample
1074cad53d729c21d302bbfce04f1da8_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
1074cad53d729c21d302bbfce04f1da8_JaffaCakes118
-
Size
25KB
-
MD5
1074cad53d729c21d302bbfce04f1da8
-
SHA1
b1c93ca797e561bf1c31758ef36a396a8e215440
-
SHA256
82bde4a9d550ef401fafb63f608057cc393ce0f87bb501010772ca8cac136a7f
-
SHA512
86c298e2160946ee20d14fed9662104d967d33de7802e2749a1fabf9cc9d72a1771163b76783e0cf8d778f4c2bd14e9ee580f10a64356626e44918238b004a3f
-
SSDEEP
384:adYQlviniMRqSG5qxpfnOPev26pa5PWe1j3cLZthMQUVmyZguvQU514vkU:adBd/SGYxdZr+kGVprQUj4vkU
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1074cad53d729c21d302bbfce04f1da8_JaffaCakes118
Files
-
1074cad53d729c21d302bbfce04f1da8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 16KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE