Behavioral task
behavioral1
Sample
af3726afbac506360196a7a7774a6773_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
af3726afbac506360196a7a7774a6773_JaffaCakes118
-
Size
161KB
-
MD5
af3726afbac506360196a7a7774a6773
-
SHA1
a76cfe17ad35c9ac2cae1ca83c059030bf13b99e
-
SHA256
1f137d2478ca046c6751af03efc28cb250c495f9b96a0d4bf3df85e739795fbe
-
SHA512
6b1b30f3ea73e3eef8d710e12e1be69c44b51c06f9ef70e746eddc0003db4a8222e960486f8e0094f13657892dbb40ff0d2504d59568ffcfcbc53af3d0493bd0
-
SSDEEP
3072:6wV4OgSzBm0ABy5LFkz3Rr0gwGj9Tf83Zkc:6Mzz8ytFkzhr0pGj9o3W
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource af3726afbac506360196a7a7774a6773_JaffaCakes118
Files
-
af3726afbac506360196a7a7774a6773_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 232KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 73KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 88KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE