Behavioral task
behavioral1
Sample
13b04e2f9d1513338540788e383a353e_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
13b04e2f9d1513338540788e383a353e_JaffaCakes118
-
Size
276KB
-
MD5
13b04e2f9d1513338540788e383a353e
-
SHA1
9e6d517c28311e6996fae38e74dc57556a458608
-
SHA256
300a65c91751a5ec7ac4c74316ed6f9600f8d97301e9eb1b916e9d403ba8e924
-
SHA512
8dcd66de498d9f244bb7d8d096d4ae6a96c4a1fee95f09db529fd17ae023b5164ad6a5819e02ba34ad95f40f4536ca69e92de7fea4a5744d5b2049d4ed15eb81
-
SSDEEP
6144:Jk4qmvAaqDTRqCplE8sHqNC+dW5yrg/MSpLbu4weOr9L:O9RHTIiloV4Syrm0rzr
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 13b04e2f9d1513338540788e383a353e_JaffaCakes118
Files
-
13b04e2f9d1513338540788e383a353e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 271KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE