Behavioral task
behavioral1
Sample
0472feb88ac858bbf819700f8e4d8700_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
0472feb88ac858bbf819700f8e4d8700_JaffaCakes118
-
Size
133KB
-
MD5
0472feb88ac858bbf819700f8e4d8700
-
SHA1
9896f95ca53db4a60fc177b43c747ea928817ccc
-
SHA256
48642014e64e728b7ada727940fe0fb2eb9c34f562abebed5625552d1c35290e
-
SHA512
ccfd3415b3ee34257adede33b5f7d28debcc44621a97b564ad36eeb47cdb0de825eac32117d9276e1be88b907c176c5f847fd91ab825da29d154f0ac6194b5b2
-
SSDEEP
3072:g5/X3eSb+IWQ2NLWOxEbBgIgk1scz7Jzx8qIouRKQ:g5ve7IpK6TyIgk1sWFOqInKQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0472feb88ac858bbf819700f8e4d8700_JaffaCakes118
Files
-
0472feb88ac858bbf819700f8e4d8700_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE