Behavioral task
behavioral1
Sample
a3cb3c15359d70323c244263f822165f_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
a3cb3c15359d70323c244263f822165f_JaffaCakes118
-
Size
124KB
-
MD5
a3cb3c15359d70323c244263f822165f
-
SHA1
9946d85762f9dc32fe4587a633c4648bb67095d2
-
SHA256
7a4bec13dc47cd7afad49c4916d73a2135708b179f18f0f3fd8a024179ad474d
-
SHA512
7c01b7d2c0377d7cd796c9a9138a23114d507bffb53f778dc4514ecfa4f1d36fa1ba66087013e574b2764f7abb80fb9e7c31ac30ab895cbe6856e20f698ffa90
-
SSDEEP
1536:Ru9e04R5SN9QXhznP1NfDYoJeTazLiT/xzK0YWzrU21fVjDianQvY:We0snP1Nf4+8zKvWM21tHQv
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a3cb3c15359d70323c244263f822165f_JaffaCakes118
Files
-
a3cb3c15359d70323c244263f822165f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 62KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ