Behavioral task
behavioral1
Sample
81dbdb1592efd1002280a893d4252853_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
81dbdb1592efd1002280a893d4252853_JaffaCakes118
-
Size
69KB
-
MD5
81dbdb1592efd1002280a893d4252853
-
SHA1
1c80af303f8c0bc9a0c07fdbdbc6102773befec0
-
SHA256
fb66044542fc03e7d0b9eaf133cddedeba4f35fce78561b77ba1efd7740e1d3f
-
SHA512
5ab7ac4f653eb3a5027eacdcc5fb26f421f03c1fd628bbed1dbd6a8c73815a73573da7c03748c25935836958e65fc8c08edaf61fa916f8464952f546ebb3660f
-
SSDEEP
768:tvL+iU51X7H/fVZf882OGni4LmvEYFRPcXVa1bPuQS7shDXlg2MbM39C9:tCz1rH/Pf88pGni4kEYFRPEkLbhJg8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 81dbdb1592efd1002280a893d4252853_JaffaCakes118
Files
-
81dbdb1592efd1002280a893d4252853_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE