Behavioral task
behavioral1
Sample
1b3e44603e565202799cdc56eb0aa0fb_JaffaCakes118.exe
Resource
win7-20240508-en
General
-
Target
1b3e44603e565202799cdc56eb0aa0fb_JaffaCakes118
-
Size
784KB
-
MD5
1b3e44603e565202799cdc56eb0aa0fb
-
SHA1
922714c0c8887322ef148d92e2dda0052e297040
-
SHA256
e213e6aa5c9dac9dab4d51c4f50193ee0c948c9cef50702e919e1d13c0709a87
-
SHA512
73e13b0d893f7c288c62eea3272a6f92d4c956954f9f773cde1ca3e79aa67b0fe2b005b0180e2be9d56241e89e4c5ba1a236fef2384a97eb8ca877bae935366c
-
SSDEEP
24576:2WaTc88Wc4NN0K8z8qYvwgYBrAM2++YwtaY40j:oc888NN0Ky8qowrrtu
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1b3e44603e565202799cdc56eb0aa0fb_JaffaCakes118
Files
-
1b3e44603e565202799cdc56eb0aa0fb_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE