Behavioral task
behavioral1
Sample
34843fed70ffa1be27e24349280cba10_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
34843fed70ffa1be27e24349280cba10_JaffaCakes118
-
Size
784KB
-
MD5
34843fed70ffa1be27e24349280cba10
-
SHA1
0a8ebb5eb7a8d15a045ec8b90642d994cf367388
-
SHA256
844252239b7a757bb12d5476bde287ad6031e18be5e5c5adf4d6b9273323f160
-
SHA512
c7d24bfb01ef04388c8bf6487bcd5b68b1d1306bc8b5d2718cd4431da457eb7ebbd0203333bea1825ff69099fd7060331ac6c5dae6b5d9b528807531f1d60a13
-
SSDEEP
24576:mKffyHzzjFmdcxo+qzCWU7y5HVKh3rkd5Z:jfyHzzhmdcxo+qzCIlwrk/Z
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 34843fed70ffa1be27e24349280cba10_JaffaCakes118
Files
-
34843fed70ffa1be27e24349280cba10_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE