Behavioral task
behavioral1
Sample
82a3b4db232c6e0d2f00468febee0243_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
82a3b4db232c6e0d2f00468febee0243_JaffaCakes118
-
Size
229KB
-
MD5
82a3b4db232c6e0d2f00468febee0243
-
SHA1
21e7937b09f4881aa1932be828e8178471d98b2c
-
SHA256
43098b0846cf3ad01d6bea32a52597727f9e6d0d35d3c691da165f2f23d9a617
-
SHA512
13d8018f61ba628aa05c8387bd117bbf11aaa281c116a1b01334da338e27d906109f060ecbf2da05af6c0c427d8846d2e80c88a06dced6032daf1526cf8c6f95
-
SSDEEP
6144:qFthLCQoRvo/sBw6wwtYIVcvPBYvhxuQkUfyoS:qlLCQEo/Yw8NenaP/NfyoS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 82a3b4db232c6e0d2f00468febee0243_JaffaCakes118
Files
-
82a3b4db232c6e0d2f00468febee0243_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 52KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 217KB - Virtual size: 220KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE