Behavioral task
behavioral1
Sample
371e53f5f654099acc664b08ff986be2_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
371e53f5f654099acc664b08ff986be2_JaffaCakes118
-
Size
784KB
-
MD5
371e53f5f654099acc664b08ff986be2
-
SHA1
b8c2a7502ccfa95d839055a0a7709057bddac082
-
SHA256
d9c2258e2a68331179a36143ce271da60ccfb96dcf48a64dad27c81a1ffcdca0
-
SHA512
3202e3c3a5b7ac98436e3a597c52a8a623b7119312965df36103d590f03b5ba8461f11a585fd9a2194afa0236631f2a450eb89ba3c5bff2334ac6d25a2d53149
-
SSDEEP
12288:MPJh8f/u9WLS68ypvTgkGMohVnUCo28GkRRoSLjMjebOhAgi7YCaL0eI/:MhB0SGJTUUCo2Xkn5j3bOhziUCue
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 371e53f5f654099acc664b08ff986be2_JaffaCakes118
Files
-
371e53f5f654099acc664b08ff986be2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE