Behavioral task
behavioral1
Sample
002e0f383ad0650ecb07c7229a028a86_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
002e0f383ad0650ecb07c7229a028a86_JaffaCakes118
-
Size
36KB
-
MD5
002e0f383ad0650ecb07c7229a028a86
-
SHA1
3b5f8fcda5f2c8a6884bc5a2210fccd502b4b44f
-
SHA256
ea363ee04b3b2bd9373069c57618f77736dcbd4f5c6feb87595d9e4f7d88613f
-
SHA512
3e56ddcb1316c426fd36f22b9c463dd735bf96c3cdc9192f38bec2c578880c78fb8c013cf112a7a7a5beacec520a07a40f162b4b7eb12f548b6ebbfef2a75622
-
SSDEEP
768:HtwQ4Ge6dSZRSkE4cmRk3+WQifuG2EakZ+dYvCPV5OrECvQ:H7Ye7kE4wu1Eaf2g5o
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 002e0f383ad0650ecb07c7229a028a86_JaffaCakes118
Files
-
002e0f383ad0650ecb07c7229a028a86_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE