Behavioral task
behavioral1
Sample
290d6a98b62bb9a900a5d85c18133480_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
290d6a98b62bb9a900a5d85c18133480_JaffaCakes118
-
Size
188KB
-
MD5
290d6a98b62bb9a900a5d85c18133480
-
SHA1
343ce5eed848bc554ace9c52668cdb3d1cd4d456
-
SHA256
94bf883cbbb1adcd582584563aca17226ceaf46a7bea5fda86209b0c59502e00
-
SHA512
edada6f3a8f8fee4134fedb019771de39c7fc23a87ab51ab209e024e20d0eed9e743bf56fafe9e7c2cd9b756c07336eb424a24ecd1491c45ab0ace11b3e7f51d
-
SSDEEP
3072:11/a5DvtKA9yYhRJVFkn10phMj7yvRPG5IEhRq49aW7Bh2Bx4CCoMWvVKeW6WkSK:11/K8A9yYlVFknuuoaIEhUUJBh2bVXZp
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 290d6a98b62bb9a900a5d85c18133480_JaffaCakes118
Files
-
290d6a98b62bb9a900a5d85c18133480_JaffaCakes118.exe windows:10 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 124KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 183KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE