Behavioral task
behavioral1
Sample
115c4d2c3e2adb6562e0a61528b16ea0_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
115c4d2c3e2adb6562e0a61528b16ea0_JaffaCakes118
-
Size
298KB
-
MD5
115c4d2c3e2adb6562e0a61528b16ea0
-
SHA1
d80600bcb5a563e805c2c8156897948c976df02a
-
SHA256
7595b765902fa3355fe96205c1023543c2fa6aa54f07f3810cf92b5d37dfb2cc
-
SHA512
b9f46648e814e17900976f4cdfc9c1854006ff8b1085c744d6c22c524cedee93bb742ce8f177e36aa7ec3889472f85a35d95669199baf2de54189615d1fbcf35
-
SSDEEP
6144:jkbTrq+7PnB3P3a5zJ4ir6y2vqvxvwvKvLvri:z+k5do
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 115c4d2c3e2adb6562e0a61528b16ea0_JaffaCakes118
Files
-
115c4d2c3e2adb6562e0a61528b16ea0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 204KB - Virtual size: 204KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 63KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE