Behavioral task
behavioral1
Sample
0438a34ff0636ae6fa50292df71a43db_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
0438a34ff0636ae6fa50292df71a43db_JaffaCakes118
-
Size
1.8MB
-
MD5
0438a34ff0636ae6fa50292df71a43db
-
SHA1
88c9dc27b58fe5c74ab5d846ec6291e5f7e7866d
-
SHA256
a69a75d71438ea54c8b52a605e0ad06812132a695bc5133e08b3a014b8a616e5
-
SHA512
02564418e42eaef942879c289de309ee3fce9daf1787d9f2fa58db42771fc9c67bf436714d8a17cacfe57c43f32f242c9ea7b1b3d911dba8c87a60290b763951
-
SSDEEP
49152:bdGmzQvEMLd6ukER/M9/9P55ey6RoAamVntNFc/:bL0EMglqM9hg8CzFc/
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0438a34ff0636ae6fa50292df71a43db_JaffaCakes118
Files
-
0438a34ff0636ae6fa50292df71a43db_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 196KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 105KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE