Behavioral task
behavioral1
Sample
00388ab8bb53362996725822197ed47c_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
00388ab8bb53362996725822197ed47c_JaffaCakes118
-
Size
1.5MB
-
MD5
00388ab8bb53362996725822197ed47c
-
SHA1
9677ee90aeb569a33d05403985b0caf26a923a8c
-
SHA256
5a5dba2e7fac3675f50f9b3e0c748d03834e0fd98a445cc52be20818133f900d
-
SHA512
038eb520153cb570132103ca987beb2fc4ef62da4fcfb4b8b952eccad2aba165058287454c942b18da3cede708a50c0b14792fded376ad663632c72226226db3
-
SSDEEP
24576:zDmRqYoQU0CmbfhJ4z6R00D5ghC5nsdasQORTiz7WBN4GpVqdQtdLJmudvPCyH2M:3DpACOfhJ3R00D5ghCrsQCi2O6tdNmuG
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 00388ab8bb53362996725822197ed47c_JaffaCakes118
Files
-
00388ab8bb53362996725822197ed47c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE