Behavioral task
behavioral1
Sample
337e13a9a5426465d90b394864217f76_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
337e13a9a5426465d90b394864217f76_JaffaCakes118
-
Size
747KB
-
MD5
337e13a9a5426465d90b394864217f76
-
SHA1
950dd7154c8e5f24accaecd2e239dd82b91ee006
-
SHA256
ff184e9ded5a6f28d2021c8fd2b2730948da0de977bed48386052171ebaab66e
-
SHA512
cea5bdc1951c9ec2d157e3c376b66d6bdd7d1331214c0ea44e5f373845687f23489ecc1eac45fcf1f84a01bc42eeb0c7ba5ad4f7dd7a18b57e68c5a982aa7f28
-
SSDEEP
1536:0DK8Fef+IvWruJx46wshHY62pB1oAl718qn+oEywcDn6TNLsLEnouy8:0Dy+IvWylpIB7lxjn7wq6xwL0out
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 337e13a9a5426465d90b394864217f76_JaffaCakes118
Files
-
337e13a9a5426465d90b394864217f76_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 204KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 74KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE