Behavioral task
behavioral1
Sample
3689a183c1d80f5b9528806bf075d362_JaffaCakes118.exe
Resource
win7-20231129-en
General
-
Target
3689a183c1d80f5b9528806bf075d362_JaffaCakes118
-
Size
6.1MB
-
MD5
3689a183c1d80f5b9528806bf075d362
-
SHA1
b866c5a5a9e004b98fcc361e1a03035311625e59
-
SHA256
d9b6b69a6f369a6c1f8861652e3a9f9a52433431e4c3e27ffed2eaca964ebd2f
-
SHA512
90dbba9af90f4a55695b5a34a1615bd1192b0f65e9f26a8be9d64ccf545aece34e8b17663ff88c5abf2754cf196fd4e58a6fe4f465013109f3049649841586d8
-
SSDEEP
98304:oAwzZHd5CU4G9KwYAOujNkIIp/sPuYvko1dup0Wy2k1bRNQLhA4OolahKAHW7rYx:2Zh4GkrAOuqnpEPxvkTb+A9akAHiEx
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3689a183c1d80f5b9528806bf075d362_JaffaCakes118
Files
-
3689a183c1d80f5b9528806bf075d362_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 9.8MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 5.6MB - Virtual size: 5.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 506KB - Virtual size: 508KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE