Behavioral task
behavioral1
Sample
17a69a6f6643ed99ffc27edd7db419fb_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
17a69a6f6643ed99ffc27edd7db419fb_JaffaCakes118
-
Size
485KB
-
MD5
17a69a6f6643ed99ffc27edd7db419fb
-
SHA1
bc61a08ea4c7c7e48d9198babc8d7b2018fc5504
-
SHA256
93f7feb6946b2050cd3046a390464cccc9a4aac3577e9818da52609468d7eca4
-
SHA512
ef08facb19562d203b6ac2180a9f6f4da46d493271e1e07af5f0e5aeee0345f09eaeef272ae33580edfcbd976e10c23552208dca4226da9dbf5fec844477c8b5
-
SSDEEP
6144:axdDyySskgWffylzWmQef3Rfo5UHd4segm/pxdKaCD0SqqDGU5qMqf:aOUkg6fylzWmQ+RCyd7a/UaCAqSU5cf
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 17a69a6f6643ed99ffc27edd7db419fb_JaffaCakes118
Files
-
17a69a6f6643ed99ffc27edd7db419fb_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 296KB - Virtual size: 296KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 127KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE