Behavioral task
behavioral1
Sample
79d5adce123b5ac2b43fa6f85cab19f7_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
79d5adce123b5ac2b43fa6f85cab19f7_JaffaCakes118
-
Size
113KB
-
MD5
79d5adce123b5ac2b43fa6f85cab19f7
-
SHA1
b655c1fd76c7e44c5fbf6a12d13f54b4209c626c
-
SHA256
2cb4c475804369cbb5b4200540038d393c3e21e42d56ea472d75e38a663271c8
-
SHA512
8ca88e2ad5537654b20e39a760661d73735d24e7263754f8bcc268d278c4e7790c21c31aeeb28f3860ada70ee4547cfa90989300fd8c7ac8fbcffc07f69c504b
-
SSDEEP
3072:+hzx6tb4TRlr6tne5UXnVUiMRvitdZ9w9XI:+hV9WeaavadZCX
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 79d5adce123b5ac2b43fa6f85cab19f7_JaffaCakes118
Files
-
79d5adce123b5ac2b43fa6f85cab19f7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 496KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 110KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE