Behavioral task
behavioral1
Sample
459675acab9ea3d91f980b3d1155b35b_JaffaCakes118.exe
Resource
win7-20241010-en
General
-
Target
459675acab9ea3d91f980b3d1155b35b_JaffaCakes118
-
Size
804KB
-
MD5
459675acab9ea3d91f980b3d1155b35b
-
SHA1
aa192df0b48a6421ae121d40f42ee2fcdb6acc0b
-
SHA256
6ffa31a1166e7a6b5e1193764a5ad61e584e0858c2e12284c1fe65382c1efad3
-
SHA512
ec2e391789e95bfb5398f71d1b0f88b32747e648f24e65c3ef78602520fef40135e99c33bf8e1095699bba3fb04bde960e68d1a1905a722ba1049953e34120e6
-
SSDEEP
12288:M2uL+5dB1YNVmTU6oGo7dBv+kxt1OQTBHD7XkF9KmTU6oGo7dBR:R9S4TFoGohEytPdDDkTtTFoGohn
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 459675acab9ea3d91f980b3d1155b35b_JaffaCakes118
Files
-
459675acab9ea3d91f980b3d1155b35b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 588KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 195KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 107KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE