Behavioral task
behavioral1
Sample
424006f3c6eadc5d70e1ad2ab401bbb1_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
424006f3c6eadc5d70e1ad2ab401bbb1_JaffaCakes118
-
Size
204KB
-
MD5
424006f3c6eadc5d70e1ad2ab401bbb1
-
SHA1
0811fc31c387cf36b6c273d4fbb8fbb8f20718c6
-
SHA256
9c9bd31408e0e4468236e597a55a9a56d50ab9d8d87f746d6472282e92157ebe
-
SHA512
e68c2a6850d231156da47e48eef9e2260760046416c9091f24ddc2f78b080f96e3a948ce9ef70ad4b32b0c592c5b2beabbd04ca43bd22b701f54b33c27cada43
-
SSDEEP
6144:cllo04xhkYGuSD+msl7ZBt1Tvc8pgoSa:slo04DBSD+nHBt1jpgoSa
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 424006f3c6eadc5d70e1ad2ab401bbb1_JaffaCakes118
Files
-
424006f3c6eadc5d70e1ad2ab401bbb1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 3.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 197KB - Virtual size: 200KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE