Behavioral task
behavioral1
Sample
427cd6aebeb583b7722879ea904ba3fc_JaffaCakes118.exe
Resource
win7-20241010-en
General
-
Target
427cd6aebeb583b7722879ea904ba3fc_JaffaCakes118
-
Size
133KB
-
MD5
427cd6aebeb583b7722879ea904ba3fc
-
SHA1
5777329c8d3ce0b0a94cbc2cc652060f55d92f4d
-
SHA256
b1707effb1edb59d6c4042ae85ead2f8d7a58133100d2ec6cd745efb59b3ca72
-
SHA512
9ad211d384cd1b61a731a3c8d0b4cc43c70e97da59c11ae5c8dec90700747a226afb14a5a5ce8e958bf39ecb3e7b1a0fbbd1bb6105bfbd5f8a80cdbaa4f748b2
-
SSDEEP
3072:CvFzn4juhl6XMQnxRdI5/koVqBpQOieKee5phx8k6KJ1kujDn2xln9jUQ:CdoXMcSkoVWLgv1P2zqQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 427cd6aebeb583b7722879ea904ba3fc_JaffaCakes118
Files
-
427cd6aebeb583b7722879ea904ba3fc_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE