Behavioral task
behavioral1
Sample
329532c9c2579fc763f97a1f768149c8_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
329532c9c2579fc763f97a1f768149c8_JaffaCakes118
-
Size
784KB
-
MD5
329532c9c2579fc763f97a1f768149c8
-
SHA1
7332a03acd1cac9984439fa91d10746463b0a4b5
-
SHA256
071305f82f28c27cbc29db1a05c6903a02f11c371afd1e48d53676a74cb1360c
-
SHA512
390cec3fc621a8c7876b89add4609dda56c03a762e94bca9f46f56af3258c4d603b0feafdbea1b441121e19b062810006f801f3b9180b2b7c28602a6f837672d
-
SSDEEP
12288:kqk0GcE3v6T6rapGGRAJk1XTH27oqxJPKHJw7QhxtjG8LOKVOOHUB6aqOOzvPTrv:k5p/6Tv81Jk5t4VKfxrLOKVOVsPTSO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 329532c9c2579fc763f97a1f768149c8_JaffaCakes118
Files
-
329532c9c2579fc763f97a1f768149c8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE