Behavioral task
behavioral1
Sample
03732b3fc2998abec46c5daaef1f7979_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
03732b3fc2998abec46c5daaef1f7979_JaffaCakes118
-
Size
401KB
-
MD5
03732b3fc2998abec46c5daaef1f7979
-
SHA1
b8b40b405049497f34dff0a3042945542e6d0eca
-
SHA256
9bb5b79fb039154bd39d8d01c40883caa9e04c20fa529a511ef51903a6b07776
-
SHA512
9a421bfa98b56e9fb68cfddf4a9fccebcbef43fa0580db8697186be88c2e56176d7a4f2e306c012c89771ade97c4aa23bb037f8cd8ace3333431421a1f2ee8e5
-
SSDEEP
12288:nKwyEqMh1VLFR7J5cwnwu17cS1f+Mjf6O9mCZU82:KHCtnwGcSFT/9j
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 03732b3fc2998abec46c5daaef1f7979_JaffaCakes118
Files
-
03732b3fc2998abec46c5daaef1f7979_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 748KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 359KB - Virtual size: 360KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
splasher Size: 32KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE