Behavioral task
behavioral1
Sample
4677ec5f778169551ef9914937668c78_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
4677ec5f778169551ef9914937668c78_JaffaCakes118
-
Size
221KB
-
MD5
4677ec5f778169551ef9914937668c78
-
SHA1
19d0bf04d8dec11b6f0f843fd46b6a0e75baeb8e
-
SHA256
608d680ec105dc71a62205230f0e0b925a234667698c10c93b721ef15c4487c9
-
SHA512
469eabea440cdb369fab187b5f871d0a24ae47fd6e9eb224507dd2f1e8b697f6832a725406aa79d558aaef7fc9960f5abf4954c7953bdd9c6a030f2a12c0a02f
-
SSDEEP
6144:bttjqTr9FHoDegsUiWEiDyuOuhLuvrxGdQXh8xHb:2/HoeglDbOuh6zxzx8N
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4677ec5f778169551ef9914937668c78_JaffaCakes118
Files
-
4677ec5f778169551ef9914937668c78_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 157KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE