Behavioral task
behavioral1
Sample
1801d4ffb772174c655a5b223fb4d781_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
1801d4ffb772174c655a5b223fb4d781_JaffaCakes118
-
Size
304KB
-
MD5
1801d4ffb772174c655a5b223fb4d781
-
SHA1
276ac888981a2a5ffefb6b644db01e427582c4bf
-
SHA256
61af517270a3ac2a300868dc988cb98bf78fd29c7300e4300f52b7f7525384cc
-
SHA512
e52299ccf7e520f36d38433134e0901ab8eb879ddb958fe171f0173034338f0444f088974775dec88c709e8d0c9611d4c726523d05dcd300e9721b2daadaa7b2
-
SSDEEP
6144:xmkkY70d8GxLZkdwFDnez3BTWxkXsBSr/LsghqA+F/BuwAODFCSXUua6rWoS:h7s8GKwFDnez3BT1cBSr/L1qt/BuS4SO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1801d4ffb772174c655a5b223fb4d781_JaffaCakes118
Files
-
1801d4ffb772174c655a5b223fb4d781_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 296KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 297KB - Virtual size: 300KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE