Behavioral task
behavioral1
Sample
430140180a9d472adce6dce62f84a311_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
430140180a9d472adce6dce62f84a311_JaffaCakes118
-
Size
579KB
-
MD5
430140180a9d472adce6dce62f84a311
-
SHA1
7ef4c34afbcdda8c9c46b6ba707fce46aaeb206b
-
SHA256
b689a13ead37adece5eb93247c96324c5398c7ac5fe7753d55722a25cad6edaa
-
SHA512
f48717f4989f7b24abe5e21ae4b520a4e0a1a93d6d0fac1632efa7c190ce7f035ead2a366dbb727022f2213800f1a60fd6f1d53c596da38b5816730e83adc5de
-
SSDEEP
6144:tpFE540RSCpGb04RSCJwDt7PNbH8vYjcLQVMXyrf45RmQ/28qSPZzu8dlLhlkS:O540RSCsY4UZDtj1cxirf++SBKQLkS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 430140180a9d472adce6dce62f84a311_JaffaCakes118
Files
-
430140180a9d472adce6dce62f84a311_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 372KB - Virtual size: 372KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 202KB - Virtual size: 204KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE