Behavioral task
behavioral1
Sample
1026c6c56056dcdc4c525204477b3382_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
1026c6c56056dcdc4c525204477b3382_JaffaCakes118
-
Size
237KB
-
MD5
1026c6c56056dcdc4c525204477b3382
-
SHA1
989a7c9c61c9b66743aac1f12ab72e1f902275a3
-
SHA256
49e195e0a65ce613d1a2f84af6cbd429a5fa13eb3b88c84778cbb0fa0a8a3874
-
SHA512
fe190a129215f01f7e5ca7a6df3fc2b2d32823ca5d03de2b3ff5fd203e9f0dda1faf99212e9529ea46d3f9816092f782c61c7f4dca79e0eeae308ed86b049489
-
SSDEEP
6144:QlCSu+qgtNZb69CQnpM6tJyANuG35zqQgs+ProSoC:2turCluM6doOaroSz
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1026c6c56056dcdc4c525204477b3382_JaffaCakes118
Files
-
1026c6c56056dcdc4c525204477b3382_JaffaCakes118.exe windows:8 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 208KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 231KB - Virtual size: 232KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE