Behavioral task
behavioral1
Sample
03a3c3d8f91daa556e038f4ce173cf47_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
03a3c3d8f91daa556e038f4ce173cf47_JaffaCakes118
-
Size
501KB
-
MD5
03a3c3d8f91daa556e038f4ce173cf47
-
SHA1
e8ae9e798659e95da84a7f43c540eb85b3f6a93e
-
SHA256
0cf270f95766a3d923aa9c3eaf8490b071733eedbd67a7b6695f44ef0db6ecd2
-
SHA512
cb6962d8b70d03919cd4fb25a6e93f4c6774ecd07448491ef61602d63444dcc99ef2ae47ef894dda89979e8e831e844285d9059c0dd7517faf561109ce083e67
-
SSDEEP
12288:sPjd//LEF4CRZssxQOSPBoTk/aR7ovu12v/3xrIRH311v+:sxgFNM6UIeu1C5rmX1s
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 03a3c3d8f91daa556e038f4ce173cf47_JaffaCakes118
Files
-
03a3c3d8f91daa556e038f4ce173cf47_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE