Behavioral task
behavioral1
Sample
f668def7ed8e55e6a281c0b69b12af0e_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
f668def7ed8e55e6a281c0b69b12af0e_JaffaCakes118
-
Size
180KB
-
MD5
f668def7ed8e55e6a281c0b69b12af0e
-
SHA1
399bbf75e159010b0fb23fadb628855a5a07d798
-
SHA256
d58c187a8c4aa7038035d13485e2e8c17533202d0f076f0a4bcc6bb205886c38
-
SHA512
21e8d5704802fe03b03601888351bca0c7cffd347f4fb5e03ed0fcd76c7d2af23b884d828ad1c8a8ff590a12871b4a26b3f89dbbb5d0ff6bdf4f7a0e9c25b3ba
-
SSDEEP
3072:tx+bpqhy7vVl94yYvVulMcvtRQT/HuXaz0lja+LGgw5K8yE:eAC974y9xFRQTPuKz0ljahgwf
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f668def7ed8e55e6a281c0b69b12af0e_JaffaCakes118
Files
-
f668def7ed8e55e6a281c0b69b12af0e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 177KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx