Behavioral task
behavioral1
Sample
39478d18988d909c36b92f905a4b6055_JaffaCakes118.exe
Resource
win7-20240215-en
General
-
Target
39478d18988d909c36b92f905a4b6055_JaffaCakes118
-
Size
6.6MB
-
MD5
39478d18988d909c36b92f905a4b6055
-
SHA1
a1ed2b2df3323d8e57c9e467e26c66e649e37a8d
-
SHA256
23c8bbed128c7c685b84ae14dabbbf89d4c71a2b78104dacb617f852ecf41df5
-
SHA512
818efd1a3fbedfe0a5dfd4bfca6d87bb6e1767283454702f9f15162dbb37c32d5d30c4d40087d6d59115262001c4418d26ef9145578b6695699b92338e53fc13
-
SSDEEP
196608:WpGu/lIOltK5wslSljZ5BArz5LltH04w1XHXrl+9a9/:Vu/lXkwSSld505Lcz1XHXh+Y9/
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 39478d18988d909c36b92f905a4b6055_JaffaCakes118
Files
-
39478d18988d909c36b92f905a4b6055_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 10.8MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 6.1MB - Virtual size: 6.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 511KB - Virtual size: 512KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE