Behavioral task
behavioral1
Sample
300853e2d8228209fa13dfc556b1149f_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
300853e2d8228209fa13dfc556b1149f_JaffaCakes118
-
Size
784KB
-
MD5
300853e2d8228209fa13dfc556b1149f
-
SHA1
992ad87ba56a0378a5b16168b787e2637047140f
-
SHA256
3d6389f67db72cbc3670c9ee8c1463c4627eba696bb2599e7678ed519276ebcd
-
SHA512
a06580393b403e47b85f29607b7fba28d8c19946cb68f5a0c77dfc8ad7a96c9d5fdccd4c59c8510bcb8f5162cbc8fd5db3defbb9ad8d1e66096b88e036aa8b46
-
SSDEEP
24576:nT94F9KRIE4RQDEctOt6FoHN5ylzVr4Jh:nOF9K1vWGON5SR
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 300853e2d8228209fa13dfc556b1149f_JaffaCakes118
Files
-
300853e2d8228209fa13dfc556b1149f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE