Behavioral task
behavioral1
Sample
830986ca08fd012660a38e04dbab1247_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
830986ca08fd012660a38e04dbab1247_JaffaCakes118
-
Size
19KB
-
MD5
830986ca08fd012660a38e04dbab1247
-
SHA1
43ff63e7c64e6cc3c08edb0cac5ca483a79a6bf1
-
SHA256
45d0e66401c3faa8b7682e825817d404efd3367a50e1734cc94bc0f338bae766
-
SHA512
62cd5a3a2be171518dcc618c52c4c7cdc0117b0efa8f75357e4252bfdf3867025a0e19ef676ca39547944ca3c460be141ceed1bbe64f1794b61d65b55e584e3d
-
SSDEEP
384:Lw4QPjtubQcLlYRgICctJrh7xadb1DJv8F0V9axyaNJawcudoD7UTOUUc3ObM:UjOnn8h7xob9JvwTnbcuyD7UKUUc3Ob
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 830986ca08fd012660a38e04dbab1247_JaffaCakes118
Files
-
830986ca08fd012660a38e04dbab1247_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 44KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE