Behavioral task
behavioral1
Sample
f0361c46d75a229b12324f35751106de_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
f0361c46d75a229b12324f35751106de_JaffaCakes118
-
Size
79KB
-
MD5
f0361c46d75a229b12324f35751106de
-
SHA1
1b1392961ca23949ab434ab84e8db4391c0caf52
-
SHA256
87f52a3b9990704edcb40f20f1f8f0a5245b0539441f5d4083e84288477427ec
-
SHA512
31f0fea483acf38ed8b1fa18cc3c66cc06ff2ba2f2972af529eca0c96c4ef41e8d6b32dc35758dcd0e8d77fa40a4d9212d20f978ae15385ac90aeb1eb414f733
-
SSDEEP
1536:N8C0iWEpRMhmPfRSqxDyLOY4gO8J749PMkR5LipWF7X261Y6u10nouy8H8BeaLCn:F0iW18pjx3T8tkvRhipWFP17outH8BHm
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f0361c46d75a229b12324f35751106de_JaffaCakes118
Files
-
f0361c46d75a229b12324f35751106de_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 92KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 64KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE