Behavioral task
behavioral1
Sample
1419e680298da63cd09d6991631005e9_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
1419e680298da63cd09d6991631005e9_JaffaCakes118
-
Size
34KB
-
MD5
1419e680298da63cd09d6991631005e9
-
SHA1
6afc2df37a0c79bdf5442cedcbbf556f4943bd96
-
SHA256
85cb8c49ac88e9971dbd6f808800b81c008ea1ca5752c4a21794b9dbbf2484b2
-
SHA512
98e934cb046a144ce004a09d150ff77373c48107bb8b1cb096c78fb9cdc4ced1dc32b0b5be0b9931226103e62ad32dfe82df72da77e204c8fabd98ce73f78fd7
-
SSDEEP
768:4j/Ivsh/72cHGLUmu0Zk961quvmzZezKSim3Uzs:4j/IUEUB0Zk43eVMzas
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1419e680298da63cd09d6991631005e9_JaffaCakes118
Files
-
1419e680298da63cd09d6991631005e9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 120KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 7B - Virtual size: 7B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.9 Size: 91B - Virtual size: 91B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE