Behavioral task
behavioral1
Sample
40706c5435ca5f04c122d0e49f4ff4ee_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
40706c5435ca5f04c122d0e49f4ff4ee_JaffaCakes118
-
Size
231KB
-
MD5
40706c5435ca5f04c122d0e49f4ff4ee
-
SHA1
41787b15f97653cd9a4af4563b0238992b35db7e
-
SHA256
b1a9e53414a59f4644bda7f2c9945e205bb6bb55ffcee3812c1fe182d751b258
-
SHA512
270305201d5d3c1aeef89794c38a268a91f765ab5b41e7fff2b40a912e471c982be93d2b0023147e8052c9748566eabf0680a437defc3bf6d640114738807d53
-
SSDEEP
3072:weLpPtN7OoutNUDQZS1QCVA7qlKQF7MY/PKaQFfaUEnTqf5:weLttIoSuDQ37qrFr63yUEnTc
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 40706c5435ca5f04c122d0e49f4ff4ee_JaffaCakes118
Files
-
40706c5435ca5f04c122d0e49f4ff4ee_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 244KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 20KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 210KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE