Behavioral task
behavioral1
Sample
404e985a83b28a0750091072358bd9ba_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
404e985a83b28a0750091072358bd9ba_JaffaCakes118
-
Size
135KB
-
MD5
404e985a83b28a0750091072358bd9ba
-
SHA1
7c82b33573a576a921af7e07a8436fd1ecb585c5
-
SHA256
8b99c5834b40f99d20390e867ba7735fc4a38f169a2ebdc8b60bc490166d3c5f
-
SHA512
0aa4cbd23d79dc9ded1f6d923b9c564bd1dcb09cde8b7e8e2e178a49c7958f19f0903160cde22b649165d8285b42cbfa094447685c9dd4afe358c150f148657a
-
SSDEEP
3072:+PimRGzkGtArKaf+A39ffVs16dfHJRELNbSBngOIZMTR/roVLzSm4p5i:tL+rHfdffVs18/JREpbwgrqRTmLz4p5
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 404e985a83b28a0750091072358bd9ba_JaffaCakes118
Files
-
404e985a83b28a0750091072358bd9ba_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 127KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE