Behavioral task
behavioral1
Sample
3287b32e75061adcc92d2eebb5056f2f_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
3287b32e75061adcc92d2eebb5056f2f_JaffaCakes118
-
Size
784KB
-
MD5
3287b32e75061adcc92d2eebb5056f2f
-
SHA1
475b8c2336328846bfaf989a7bec58cb896ff3f9
-
SHA256
eeb321f2756664fd6d389feebc6a149a3bfbc5bb304dde5355523ead1f41f4a2
-
SHA512
4532585989b0102057299f108d8f04117a4508bac7813504b6d06555a2b64d016563d7da08dd8352547ba4e6f56c5ebd5e328594f77d325b6df4adf5bd591e7f
-
SSDEEP
24576:ARKfYf2utVj0emXBD1ZVAnUEtCN0neIaxaj0:AAfYf2utZmRDVAnUEtC3m
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3287b32e75061adcc92d2eebb5056f2f_JaffaCakes118
Files
-
3287b32e75061adcc92d2eebb5056f2f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE