Behavioral task
behavioral1
Sample
a379b12c9858dd871c041949135b8309_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
a379b12c9858dd871c041949135b8309_JaffaCakes118
-
Size
97KB
-
MD5
a379b12c9858dd871c041949135b8309
-
SHA1
681c32c3a20d7c434a2229d1a95aaabdb50466e1
-
SHA256
bfd7c64d027fa97bd724229be02c6aacc9576e4bb8b6411eae081c10a7b5a579
-
SHA512
7c051da8d6d0a8d564c744a3de6458290a395731c76f944ed9376cdae261466e1535ef9a4ad8c5e991b859ca4bc1eb525eb45bba33950f083aa436edf2e932f8
-
SSDEEP
1536:9fTiwKE9scBhfjPcV0G2IFc8Hs2YgLlXZ9XNnouy8/R:9DP9xhfjPcV0Ey+RYOJDoutp
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a379b12c9858dd871c041949135b8309_JaffaCakes118
Files
-
a379b12c9858dd871c041949135b8309_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 33KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE