Behavioral task
behavioral1
Sample
1409d150f2d5c3feca1d5425af82875d_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
1409d150f2d5c3feca1d5425af82875d_JaffaCakes118
-
Size
1.5MB
-
MD5
1409d150f2d5c3feca1d5425af82875d
-
SHA1
8bdf36180eb8cd69e68a48f5e26d6d37bc38ac79
-
SHA256
dfec023b8cf40248e82814519f90faa68dd3bc1bebcbb6dcd2363cb8b3506d00
-
SHA512
404488bae5be0576350a72f818c2d1d871f6c8f6f846808122b2896a424d404322f1ead6df56aea926bbb2ee2d5392e0594f093bdf7009c572de9e98dfb10b7d
-
SSDEEP
24576:pqjFsVwcCk5uJsiWvd1CAt3HTN3LSSzkPW73qMnaUpnRCr7UYMj/RIZv91w8i:p7l40v+At3HlSSzk+ugHPptteV1
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1409d150f2d5c3feca1d5425af82875d_JaffaCakes118
Files
-
1409d150f2d5c3feca1d5425af82875d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE