Behavioral task
behavioral1
Sample
017336e3641a9f73400bdef8a3fc1754_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
017336e3641a9f73400bdef8a3fc1754_JaffaCakes118
-
Size
40KB
-
MD5
017336e3641a9f73400bdef8a3fc1754
-
SHA1
1d5972cb85f05f3f3965ddccb32f364f131a8c38
-
SHA256
b0e22f464fbc2646c906728c1c7f3272188f9ff1ae007f5b0cfba0a961ec5940
-
SHA512
eb828fca33692399b373df3875f33978183ff6d73bdaac2d8580fdf69d12016e37db78f4cc4394763ca5781de4d86308668d42d18973052394d90f28c75f90dd
-
SSDEEP
768:5QOX6g0U1LLhLSlf6tkA9nbcuyD7UMHjvAfS/jZp92HOpy:7qgz9hL+Anouy8ivxNT2H
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 017336e3641a9f73400bdef8a3fc1754_JaffaCakes118
Files
-
017336e3641a9f73400bdef8a3fc1754_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 60KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE