Behavioral task
behavioral1
Sample
c4b042271c25b19cc8b2d36a8e17ea44_JaffaCakes118.exe
Resource
win7-20241023-en
General
-
Target
c4b042271c25b19cc8b2d36a8e17ea44_JaffaCakes118
-
Size
589KB
-
MD5
c4b042271c25b19cc8b2d36a8e17ea44
-
SHA1
c9ce05f7b6efb1adec66b1e99eb09dedeae07475
-
SHA256
7e66a26a7a2a2265ac8853903dc4c56a0a1a83c0de23ea9b54980f1858eb2789
-
SHA512
b5c589aa5850ef0fa8c7e5e4dcf1a9e0ed12ee4130e09ddc6ede3e17018bff00fddf043f7a2871bd23a18f45bb62e4eb0aeb603d214ee9148f917e21a13fc5d5
-
SSDEEP
12288:9ffLtEIQIu7k5sscLsD5iZqHyscNExmj1NT5BzYQR8NxOz8Y5oSU:9fTOIQIu7k5DzvLxm5Bl8sk
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c4b042271c25b19cc8b2d36a8e17ea44_JaffaCakes118
Files
-
c4b042271c25b19cc8b2d36a8e17ea44_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 3.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 585KB - Virtual size: 588KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE