Behavioral task
behavioral1
Sample
b0031126a5102853788b8c9c412b8402_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
b0031126a5102853788b8c9c412b8402_JaffaCakes118
-
Size
345KB
-
MD5
b0031126a5102853788b8c9c412b8402
-
SHA1
84db6029b3ca8368d5a72316195af7c49c4d06ef
-
SHA256
c3c8451da7f7e498d3cc52d099198505a9d98e8ffa03d627b5ecb7a3e2d67dd5
-
SHA512
9ca7a15ae18a3a672087df3ea172116f5d2ba81713c9b0fa7d3424e74553dc70334c7d56e5eff3447bc6e7ca35dc4155747da8098ba016e874191323c96c3f45
-
SSDEEP
3072:mqcA1oETb809xRkaxKwlvtihZi/xMY8xpwByl3ZAlDZ4soVqX2OH+Pzz/T8MYz:mqJoETb80TnxKWHMPxq6kGsoomOEz3Y
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b0031126a5102853788b8c9c412b8402_JaffaCakes118
Files
-
b0031126a5102853788b8c9c412b8402_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 212KB - Virtual size: 212KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 130KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ