Behavioral task
behavioral1
Sample
1678d3a0c57c01b8ba136520fd3324c1_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
1678d3a0c57c01b8ba136520fd3324c1_JaffaCakes118
-
Size
203KB
-
MD5
1678d3a0c57c01b8ba136520fd3324c1
-
SHA1
23c5a5bb83da4b99d199e2fe3274e064bc389c7c
-
SHA256
df42bcf413b4dfa194e93333628cbd25b6dd7f0b7174066ece3ecddff0a9a8b0
-
SHA512
a777f17ad3b398f6bb2b44bf5ae4dde7010b0e40f786dfcea10592517763fee2af75e582c7070df002c627bbd047ccf55f2fde34f90552192290428946b9bc63
-
SSDEEP
6144:76hTHc0dbEorTh3HNdGu4uhrVbYWb9/cdMC5Zk:e8kv5vBrVb//856
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1678d3a0c57c01b8ba136520fd3324c1_JaffaCakes118
Files
-
1678d3a0c57c01b8ba136520fd3324c1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 72KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE