Behavioral task
behavioral1
Sample
1573a3922ed33b2ddbd7e8fb9f18cfd8_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
1573a3922ed33b2ddbd7e8fb9f18cfd8_JaffaCakes118
-
Size
83KB
-
MD5
1573a3922ed33b2ddbd7e8fb9f18cfd8
-
SHA1
1f415a5b88c3c2d80949445b5456f4884716565c
-
SHA256
a2b4bbde567330c093a046b72bce01879b2aa96a7453dca15d84faa20768c894
-
SHA512
233482d6f06edf319e40766a9fd1c596cb208187d9d51c00a722a72dab856246de4abacbf8f4e75407fe772d0cd347f5aaeb51635d51f38df95c5923f0dd85ac
-
SSDEEP
768:H4IgxibYBhZ7gA64Fxa+43O4AQwcTQi5lgaBT/EKXIqyZ9QKgLa1MScjklD6:H4I6pt7zF4+OO4AQwcb5WKXOSLa3cIl+
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1573a3922ed33b2ddbd7e8fb9f18cfd8_JaffaCakes118
Files
-
1573a3922ed33b2ddbd7e8fb9f18cfd8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE