Behavioral task
behavioral1
Sample
3236643c6056b3582bb6f20518e966fc_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
3236643c6056b3582bb6f20518e966fc_JaffaCakes118
-
Size
127KB
-
MD5
3236643c6056b3582bb6f20518e966fc
-
SHA1
5f6ae9c7853fc1ba57d08003211fff5a9fb560a3
-
SHA256
10772fce629090c009d2a00ff127b06e5ec7fac1ca5a125d4c2cbc48e5cacea2
-
SHA512
c384e6b8266f8e9076a29086dc7609ae6c6e01f85b44d521a7f411bcb09631522feca71b68ec91a9d85866b27e07a4bc25aa05368b6cfd845c674b71679d6857
-
SSDEEP
3072:9QWp9EnzA0YHiXB0LE4R9tgnyptG+JErlou5tVHFn1st0:9Jp9EnXB0LhR9unaG+erloy7HFn+t
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3236643c6056b3582bb6f20518e966fc_JaffaCakes118
Files
-
3236643c6056b3582bb6f20518e966fc_JaffaCakes118.exe windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 156KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 95KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tnqzxwv Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE