Behavioral task
behavioral1
Sample
1407a4ff3fddc162a77a62e81246421f_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
1407a4ff3fddc162a77a62e81246421f_JaffaCakes118
-
Size
32KB
-
MD5
1407a4ff3fddc162a77a62e81246421f
-
SHA1
9d8d90b3515255c8c561dbf6615fa0865347190d
-
SHA256
872746dc5896f964eb1f8cadd17f7f3c9d184328e99b09aaace6cd9980efe239
-
SHA512
c46e771b9d5b2081e771249cf5c26f2ac5257c6e692001ce11c9a5eaa67d405c18335d6850499791216e99926f25f5b3ecc6dd5be6da1bbfcbdc883e9beb539d
-
SSDEEP
384:66hGD3TiHScJilKICJLqfY8KWf7RuktvckguTT0gTUOq1aiOcTVRM7FDM7W:I7eycMlKRqjtVt0kJTT0gQ5aYRS7FY7W
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1407a4ff3fddc162a77a62e81246421f_JaffaCakes118
Files
-
1407a4ff3fddc162a77a62e81246421f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pebundle Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pebundle Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pebundle Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Asus Size: 512B - Virtual size: 1B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE