Behavioral task
behavioral1
Sample
868599db25aa76ffc0c232a37f515129_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
868599db25aa76ffc0c232a37f515129_JaffaCakes118
-
Size
172KB
-
MD5
868599db25aa76ffc0c232a37f515129
-
SHA1
7c8797e86796f8b9b954ee3cad5cd45be6f6e8bc
-
SHA256
c892c40e922ecd577c6d305b85187a27de24c940c68c41dc1aac0726e527e141
-
SHA512
4080a4ee8e060af1e7668fb7624588773072a6e160e4e7d679894dd299eec5dc9c86093fa66fabf238e8ea036ddbe9cc71e6732e4b8f9fdcd6f613d3557ad733
-
SSDEEP
3072:nm1LqzsqxDiaj61OjvyNojrzXu0idqOV7uXPFvLAloISu3KXw/e:uLqzsyua21c6NGzXA4VLAlAq
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 868599db25aa76ffc0c232a37f515129_JaffaCakes118
Files
-
868599db25aa76ffc0c232a37f515129_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 93KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE