Behavioral task
behavioral1
Sample
1574c99696a680d29482c0687c61b010_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
1574c99696a680d29482c0687c61b010_JaffaCakes118
-
Size
44KB
-
MD5
1574c99696a680d29482c0687c61b010
-
SHA1
4638582170f8a753b0df4daae8536502abdf874e
-
SHA256
2ef3dbca7b915339dc90da92dd30e006cd03b8024d510d1e217f425997f8df06
-
SHA512
e0908c2845f23dee7a6f3d366d6a3b9dea136b57bf8c5161d34fc3d20c0a465dc627d86602f4575407f5e4723268e8842fdf8e241fa89d7540238d58a10e3045
-
SSDEEP
768:WRGuY2P0Vo6r7SiAwyrMRjbnvwnbcuyD7UCP2C/lC8T6UCDwhmpVi4x64D/2SSet:YPcVo6r7S/rabnvwnouy8itCa6UowhmC
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1574c99696a680d29482c0687c61b010_JaffaCakes118
Files
-
1574c99696a680d29482c0687c61b010_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 60KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE