Behavioral task
behavioral1
Sample
312b4cf2f853a426f5248ed9226f0365_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
312b4cf2f853a426f5248ed9226f0365_JaffaCakes118
-
Size
1.4MB
-
MD5
312b4cf2f853a426f5248ed9226f0365
-
SHA1
1b7167afbb6a50ca3d935ee33aa050110dcc52fc
-
SHA256
4c17d8302cadb95f7776118ce072618b2719cf06c16c0c0f61f101f55408eecf
-
SHA512
5a7c7803f35ff144dc1562599245213ab6589c786ceec10b192f954a30e844f1754ea277f3fff4f18579ce4003a33f441875490881628b4a8be63300fceaad5b
-
SSDEEP
24576:hUCodFxV+WJsRas6YomEyb3Bdx04LNEig5qRfEVjCFouGV04r0Yfn16H:hUCodFBXs69mEyVTNtcqtEFCa/V1rj1
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 312b4cf2f853a426f5248ed9226f0365_JaffaCakes118
Files
-
312b4cf2f853a426f5248ed9226f0365_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 17.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE