Behavioral task
behavioral1
Sample
325236ddeb4fe6a57e07d2489011ab01_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
325236ddeb4fe6a57e07d2489011ab01_JaffaCakes118
-
Size
306KB
-
MD5
325236ddeb4fe6a57e07d2489011ab01
-
SHA1
ecdd1d0ca66c80b29eeaf9507f75f02d20ca0ff2
-
SHA256
39a2658eedcbf72169879b2cd2c71023214331f2823b3277f08b4aba8066710b
-
SHA512
668ffde85fa04f0fcef2ce19d14657d35bfaf79d9774f06cb9a6cd8259f5c177663e1c3c98db49949ff7daa11ec73b09dd45c05095fb805afb2461a91bfd2bef
-
SSDEEP
6144:+KoVu1/YhD5ic3fuQ5bCWBeJukgpVyGUA9az3Q0j0SNU3:+KoIYPv3WQ5PeJuD/ZUA2lNS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 325236ddeb4fe6a57e07d2489011ab01_JaffaCakes118
Files
-
325236ddeb4fe6a57e07d2489011ab01_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 124KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 61KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE