Behavioral task
behavioral1
Sample
683025c47fa9b3f7b3cab0c580f1178a_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
683025c47fa9b3f7b3cab0c580f1178a_JaffaCakes118
-
Size
124KB
-
MD5
683025c47fa9b3f7b3cab0c580f1178a
-
SHA1
a3c565c399417266a6041880b4b06f0505a21a04
-
SHA256
e75fe4e0f84980648243d364011cd65feee29e5d4f42634f4c92746ae9fbbf5a
-
SHA512
cbcbe95e446641178c738b12cca559fd7a2139a57649cac13f64c2be8de7eefd12d0b881d0e463ec68b757d46321f2ee9baa40cff1bd7a6b7b62a5a35f398aa8
-
SSDEEP
3072:NeSQ41MZrrOwzrq5Ss9eYfphfFQkUcot3EpeBWLs95BoCbm:NVYrJrOSsRwcpeXq
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 683025c47fa9b3f7b3cab0c580f1178a_JaffaCakes118
Files
-
683025c47fa9b3f7b3cab0c580f1178a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 107KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
42vab535 Size: 62B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
oqvrztrg Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ