Behavioral task
behavioral1
Sample
039507e0e0e258afad7178d61179d78b_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
039507e0e0e258afad7178d61179d78b_JaffaCakes118
-
Size
363KB
-
MD5
039507e0e0e258afad7178d61179d78b
-
SHA1
07ac68b721cacbbf2dbf6dbaa40e0b8e5a876c70
-
SHA256
db164a52db1ca47382b29469ca79c5d37937478280acaa20e8b0deaa471be820
-
SHA512
a17bde641fdeb7c1aeba05f3dc1575f627bc480de0edbbb9e7eb0e094e8c2ea98d6a79147990f408bdcf1c483341736a3cdb8ee3f298a41237f861b61ab3b2fc
-
SSDEEP
6144:yKWnMbzIHKAYx23WyCRxA9WhO4ZDSczLVwq9tXfzB/dvmrmab6yR:ywoqAY2WDRnO6dwq/X7BtzC
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 039507e0e0e258afad7178d61179d78b_JaffaCakes118
Files
-
039507e0e0e258afad7178d61179d78b_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 660KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 354KB - Virtual size: 356KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE