Behavioral task
behavioral1
Sample
03e2d19036f41cb3744d880b8db6a361_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
03e2d19036f41cb3744d880b8db6a361_JaffaCakes118
-
Size
239KB
-
MD5
03e2d19036f41cb3744d880b8db6a361
-
SHA1
b210af10e9b73ca815b11abab783f1b70ca55d88
-
SHA256
7f993288686d6f22043844955530f79ba684312994d50d3b9b0762bc892a366a
-
SHA512
06baf29290ccd38bf308e4b9ea50c2ab976b377a5c017c41dea26e52fc59ea53c9de5d3f98225d32c82248e6000c740b02443557959fc80b8970142fa1bc0bba
-
SSDEEP
6144:4iS2oSQsE2L2oHax7BvntUKy+YzuVCNKgAYIv:RS2oSc2deVtJyp4C4gAYS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 03e2d19036f41cb3744d880b8db6a361_JaffaCakes118
Files
-
03e2d19036f41cb3744d880b8db6a361_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 84KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rcdata Size: 204KB - Virtual size: 208KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA