Behavioral task
behavioral1
Sample
3abfffd74515d07af124053e653c027a_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
3abfffd74515d07af124053e653c027a_JaffaCakes118
-
Size
234KB
-
MD5
3abfffd74515d07af124053e653c027a
-
SHA1
89478c8e57a860c528c9dfda66bc67117ab93265
-
SHA256
1e16c4661668267ed9ee210eea139b67a6cb7bb7e09cd9bd4ed45a1bce8f7d58
-
SHA512
53de1731c815683d63a5e437aea85db64838beeac5be29e67fdcd488443222e1d7a86a93fe71d1fd9ae677ade6c5f3d5f9ef97fbf5336bbfb7dce7e2f2d0ae13
-
SSDEEP
6144:SI91FHCFVH6QE8H/NJ0fBDKFTNYzeQ254cm:J91FCFQQXH/X0fQNYzy5Hm
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3abfffd74515d07af124053e653c027a_JaffaCakes118
Files
-
3abfffd74515d07af124053e653c027a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 432KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 190KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 43KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fyboyxo Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE