Behavioral task
behavioral1
Sample
3234972d930d2b23a26c880df3c03b7f_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
3234972d930d2b23a26c880df3c03b7f_JaffaCakes118
-
Size
417KB
-
MD5
3234972d930d2b23a26c880df3c03b7f
-
SHA1
8be15722bd697df7aff41b341e15b4f73bd350e9
-
SHA256
0ef1ee29390486403cb10e98930d5dee1ce8166567d7bc0760bd73b0928c71ec
-
SHA512
038965781d5c841ec1e350e7c6d401bc62f185db3a472b0cf813c51ab10cb2ad8dd3e4d7d7a69dcaf388b3acd5b47d175409d34925b703c3d9def4984ed7d8da
-
SSDEEP
6144:Ek4qmqIGQwpTO/Q9OtYsMexSjQAG/fv73YxW28AX1b5u/UxeHnWaGYX7zwSNDe:H9f1EwOtxMzG3z3E11GUxF67zG
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3234972d930d2b23a26c880df3c03b7f_JaffaCakes118
Files
-
3234972d930d2b23a26c880df3c03b7f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 291KB - Virtual size: 292KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ultra Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ