Behavioral task
behavioral1
Sample
851299a42326e274565033dbdb6f33b7_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
851299a42326e274565033dbdb6f33b7_JaffaCakes118
-
Size
180KB
-
MD5
851299a42326e274565033dbdb6f33b7
-
SHA1
7e5279eb0842e146e1b3311ffa301806b889ef80
-
SHA256
3cecb9561c8f25bd75025fdf6654472ffa122b6f9196a25ecfd9a4150ed8364e
-
SHA512
1b3e34049d6a5d4859a273d09da40bac54ca7e99a983258df09f1bb6538d8bb9515ba8b1fd844e321e2a0c644fd50d390a95b7e966d15e16f04c2f40922ec316
-
SSDEEP
3072:IGp8Oq+g1Yncwuy7ELoiZ2yHEPhsd9RCnRKlaH8vh9lAXDqHtSfY682ha0mpvIV:xp8k4YluyYvEUnUKokh9lAXk4w682k0
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 851299a42326e274565033dbdb6f33b7_JaffaCakes118
Files
-
851299a42326e274565033dbdb6f33b7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 272KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 141KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 37KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE