Behavioral task
behavioral1
Sample
740961b58c28a34d35b2db3eac040ace_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
740961b58c28a34d35b2db3eac040ace_JaffaCakes118
-
Size
188KB
-
MD5
740961b58c28a34d35b2db3eac040ace
-
SHA1
08a152445ed95a906c094ae58a3e04f27a838bd4
-
SHA256
a8ca9d31dbbdb5a6043304530eadf0b67325b7323222aff5bb1bd4b71d9cc905
-
SHA512
b59a325eaefeb097b985c5ef84335eec5ebe0b538773ab809c458d213a64afc0c44a06b7dfc1cc771e5d3c9c787b77ad7c47fba9874a200a6904d7ae74490d3b
-
SSDEEP
3072:17QG53S2qq0Z8k93xF26rBSPoV+gRh8BqelFW6++0vvOTYsSNwR9q5ZA:zSHq0Z8k92iBSPoV+gRh8celb++0vvOL
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 740961b58c28a34d35b2db3eac040ace_JaffaCakes118
Files
-
740961b58c28a34d35b2db3eac040ace_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 166KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE