Behavioral task
behavioral1
Sample
946ee03a31c32accd181419e630de5e8_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
946ee03a31c32accd181419e630de5e8_JaffaCakes118
-
Size
133KB
-
MD5
946ee03a31c32accd181419e630de5e8
-
SHA1
c5fbf281ffc0e8ef1158418082cd35ab0cfc127a
-
SHA256
d7e45675accb1b6790bf244d95119036fc3c7700cf77ae5c509be1dacdd4db03
-
SHA512
7a1a0e293b0a356725a6310dc52fba38cbf8b888977d5ed7638bd2c769a458c257cc86d8674e689c7db03feec436e4a5867e7f579a49f1d5afbfca077b8983a6
-
SSDEEP
3072:Gf5ocGqkSx+oUMAstuM5qjc/lJzREqC9PzmH5QupyVt6Q:G2/U2Mc6uc/lJzItaHKupy76Q
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 946ee03a31c32accd181419e630de5e8_JaffaCakes118
Files
-
946ee03a31c32accd181419e630de5e8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE