Behavioral task
behavioral1
Sample
757d817e9ade558dc83b010232041196_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
757d817e9ade558dc83b010232041196_JaffaCakes118
-
Size
421KB
-
MD5
757d817e9ade558dc83b010232041196
-
SHA1
8ea2eb49aef04b64b1418e85722d11a72bc51922
-
SHA256
f3b4da2e149c1b391ded5adf0f9a0366e6d010013ea2c2724321c6904f96d6da
-
SHA512
08ea80c3a12d4d20d455c896f294559837bd8c08b8ede2780e32dd713713be5a837eb1a2c8732380a8ad5758502804aa02ec44808b803835222dd9861182ce60
-
SSDEEP
3072:VHtSR9SwoeDgKAZZA+SSV+AnNiYOEMuD1/BQkIhZolF3kAX7S6ZMhL:VNSR13AZa+3+AVOEMyBeo33kq7+J
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 757d817e9ade558dc83b010232041196_JaffaCakes118
Files
-
757d817e9ade558dc83b010232041196_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 248KB - Virtual size: 248KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 110KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE