Behavioral task
behavioral1
Sample
862e3c8fd07af99e289b6373a37a2722_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
862e3c8fd07af99e289b6373a37a2722_JaffaCakes118
-
Size
295KB
-
MD5
862e3c8fd07af99e289b6373a37a2722
-
SHA1
4bd6089d086191a03ae2cd11bdd943f924ab1189
-
SHA256
7b5a81826f5a7819a952300601831f32c925efc7d7aab9832c2e79e155f2ce89
-
SHA512
fede8a2c46704613a0df04cdc3100647f542bad537333dd27f785dab95023332542bed07864171bb23a13124909809b27469166a55e087f837e72984358c03ca
-
SSDEEP
6144:0r2op6RCEMCCbl3uXBVt7/b7Tf6Ajg9S+rOPHGZGwaqdoS7:C4Q/1leXPB/Tfhjg9SDHGRZoS7
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 862e3c8fd07af99e289b6373a37a2722_JaffaCakes118
Files
-
862e3c8fd07af99e289b6373a37a2722_JaffaCakes118.exe windows:0 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 340KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 271KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE