Behavioral task
behavioral1
Sample
ad3c332128b18abdd8f7a00af6300178_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
ad3c332128b18abdd8f7a00af6300178_JaffaCakes118
-
Size
306KB
-
MD5
ad3c332128b18abdd8f7a00af6300178
-
SHA1
eb1523ae49d92f2e96b0de3fed656d777453debe
-
SHA256
3f9167e9e739202da3b6e76432fcb6d8d43dd7525b81999290e6745d2257a331
-
SHA512
1ee08c4aa3ddceab6017e70ad679fce90c486aec236a1028f3d8dffef23e1c840c29b1675391906b00a5f9337744bec1b18e556a301195b184368100c10bfe02
-
SSDEEP
6144:uhdnr1a1vUxAlzfA5yyTtVjZnP5CIRVJi5mVFXLTXEMl7GYYaUoSLYL:qdnr1LQGPTBPsIRVJi5mV9TibaUoSsL
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ad3c332128b18abdd8f7a00af6300178_JaffaCakes118
Files
-
ad3c332128b18abdd8f7a00af6300178_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 660KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 227KB - Virtual size: 228KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE