Behavioral task
behavioral1
Sample
f031ac46cfbf8b5e403ce2d1f93a2813_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
f031ac46cfbf8b5e403ce2d1f93a2813_JaffaCakes118
-
Size
96KB
-
MD5
f031ac46cfbf8b5e403ce2d1f93a2813
-
SHA1
237311f3be4ba00a858208d7ad315a016eedfe85
-
SHA256
5749107a64eb95387a9a127f4dbc887ea282b42ef2bdb15a818b4195cb5808ff
-
SHA512
88bdaaf1992bd891f080cb7c14c421858d6df77c3c0f2517ca0f14bdaa5bba0d9d9ecea176b5bc8678629f5feee2414d50ece2ddafc684caaaa7ea8fc12b0ac1
-
SSDEEP
3072:3IN20xl+jbD4Fhrn9M72aC/J/eETuOGAGFlN:sxl+jbD859MiaC/J/esuLAM
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f031ac46cfbf8b5e403ce2d1f93a2813_JaffaCakes118
Files
-
f031ac46cfbf8b5e403ce2d1f93a2813_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 184KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 88KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.NewSec Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE