Behavioral task
behavioral1
Sample
f51b35f38ab1cdf13fe6397577a72330_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
f51b35f38ab1cdf13fe6397577a72330_JaffaCakes118
-
Size
145KB
-
MD5
f51b35f38ab1cdf13fe6397577a72330
-
SHA1
b1326cbf227454c7c8158140a32915a2dbb980a1
-
SHA256
dad29c02290c25ed5169b7590f9c9ccd9cd885372b76c6fa00f4013440275f61
-
SHA512
7a638c242f766b7ecedc16349387a4202388ce87cf5f5fd03a1e3d8a8035fb4b120af6f58c64e77e73aca95d2a93eb9f8fd9539b2a62700d8bd5d1dd51fd1366
-
SSDEEP
3072:q/10xuj/X3iL1ly1pjHrSbFH4tav2nu3LaPJE3EoSout:YO5lONHehHdjbaPJsEoSoS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f51b35f38ab1cdf13fe6397577a72330_JaffaCakes118
Files
-
f51b35f38ab1cdf13fe6397577a72330_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 272KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 140KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE