Behavioral task
behavioral1
Sample
4096c7e7fc37466cfac9ed302caf7239_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
4096c7e7fc37466cfac9ed302caf7239_JaffaCakes118
-
Size
501KB
-
MD5
4096c7e7fc37466cfac9ed302caf7239
-
SHA1
480ea3b2526b882bd88c1f6e4269526b33881912
-
SHA256
0b7535d8926d4cbd7d47defcf7da6a512cf73400a79ca31b5c39dbf594415e6c
-
SHA512
309c519ed8444ba9cf8d655a50e0755b13d6e4a80493da4a389e0fc526cdddf03d628c5efc3f05ab31429b1b6e5edd5817574e6382269b24dca8ed2b86f2cc40
-
SSDEEP
12288:vwK8owiDjND6Y+uUU1BIQr11s2ENe1rctPkd6tA7dW0y:v/8oL/fU8BJs27B0MdR7AL
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4096c7e7fc37466cfac9ed302caf7239_JaffaCakes118
Files
-
4096c7e7fc37466cfac9ed302caf7239_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE