Behavioral task
behavioral1
Sample
1122cd595213065798353914ebb85b03_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
1122cd595213065798353914ebb85b03_JaffaCakes118
-
Size
1.5MB
-
MD5
1122cd595213065798353914ebb85b03
-
SHA1
904ef1e7c7f86b1563c25abe2517eaf55df7b06c
-
SHA256
cbeb1b205afe4db8079f8f7d16fba8626f70bfb7a3ed5e8c2e3167b82aff865e
-
SHA512
4d18f1fcf222fdd6f95d9cd0d7e8525e8c883780b6e7610baf2758ceba4d1e6eab0b57a1ccaa8b90f794f25b1120048d901561a84b7eb7c23211ad0acd73923a
-
SSDEEP
24576:l4W7UVZbrXCYeRnaW2SrKHseC/8BszSLz0a/Q4W0F5OGgkI2W:l4W7ESYeRanUn8yzAIa/Qp7kj
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1122cd595213065798353914ebb85b03_JaffaCakes118
Files
-
1122cd595213065798353914ebb85b03_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE