Behavioral task
behavioral1
Sample
56397753cbcb4c3dcd8bd65147482334_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
56397753cbcb4c3dcd8bd65147482334_JaffaCakes118
-
Size
784KB
-
MD5
56397753cbcb4c3dcd8bd65147482334
-
SHA1
9a79d202426b6b56132b5b98d174871a8f364490
-
SHA256
b1c042600399e65e5878c291d72b91efa3257ab883e245880e99b158f8542d60
-
SHA512
0d71f0d235289c8ab42664665f6622cbff8853e4dae0c9a4d248dec9995acefe305844c37e2e3902e358c4b5b7753b7f9da11c060def9f4393760179716608b7
-
SSDEEP
24576:+8x/ytsgXHKj+SG1iYc3D3GMnLFeDLloiK2mWNZ0:ZxYZSG1Xc3D9peDK2mWN
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 56397753cbcb4c3dcd8bd65147482334_JaffaCakes118
Files
-
56397753cbcb4c3dcd8bd65147482334_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE