Behavioral task
behavioral1
Sample
876feb5d156a16455eb68290831da59e_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
876feb5d156a16455eb68290831da59e_JaffaCakes118
-
Size
188KB
-
MD5
876feb5d156a16455eb68290831da59e
-
SHA1
cfee220b112cb3d123681f141f2679623521600b
-
SHA256
38227aa1a403292b362efd8416f00f54f968730bfe22ffcb93da47b9b94dce8e
-
SHA512
fed577c3c723a71d283b6f0b201b7cb9b750ee01103dc26b8bfc3ffc17692065276c45811105e0aadd594909e6c6a1cfb79e073fd36b166f39a9f761ec48f14c
-
SSDEEP
3072:T7QG53L2qq0Z8k93xF26rBSPoV+gRh8BqelFW6++0vvOTYsSNwR9q57a:pLHq0Z8k92iBSPoV+gRh8celb++0vvOd
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 876feb5d156a16455eb68290831da59e_JaffaCakes118
Files
-
876feb5d156a16455eb68290831da59e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 166KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE