Behavioral task
behavioral1
Sample
028d34ef76cbf0d7756af38036985573_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
028d34ef76cbf0d7756af38036985573_JaffaCakes118
-
Size
364KB
-
MD5
028d34ef76cbf0d7756af38036985573
-
SHA1
ab62988dda1a4a87d7dd897c1c2925b594f8181a
-
SHA256
f0904734ac420af8eb755b2fb4152da799a4bea8a0f271e01f2c0888f6e08a2a
-
SHA512
a6b7c71aa917ae0f542c717783cac03cf20efe955b4b35a0aed477f4bf71c87eb925101b32193cb1b658de5d9085c1f92089ede49f85fcceb6551f468374f434
-
SSDEEP
6144:gxJ61E0Fg0C7pzNZT3KUDEeuH4RU0yDaytuxcz7TPUhKuh91RpPaYoSMKS:gxgvC79NZTaGuwiuxu7Tkf91RpPdoSjS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 028d34ef76cbf0d7756af38036985573_JaffaCakes118
Files
-
028d34ef76cbf0d7756af38036985573_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 756KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 335KB - Virtual size: 336KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE