Behavioral task
behavioral1
Sample
00fff645a036de024bcf388d068d4336_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
00fff645a036de024bcf388d068d4336_JaffaCakes118
-
Size
19KB
-
MD5
00fff645a036de024bcf388d068d4336
-
SHA1
26c0e9326c93502a27ea8bc02bdd88c85bd5b9b2
-
SHA256
ea44be37bb19579b67bfd330805c8526eb1596e756f669991404a653eb39a350
-
SHA512
3237c6e73b4f2527781327e20894b04cfd26e6e86e10bc209f0bc07457e9136a97b3d4cabbb14c8cfa94ff99d1f255718998eca072e32dda83aa4794eef3c86c
-
SSDEEP
384:tIO9qmqoji3uihwR2Bf7cXteqtYSlTG4VsWU5FX/J/:KrmqEiOVtfVjmN
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 00fff645a036de024bcf388d068d4336_JaffaCakes118
Files
-
00fff645a036de024bcf388d068d4336_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE