Behavioral task
behavioral1
Sample
158575ebf828b3ab412f47af28748661_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
158575ebf828b3ab412f47af28748661_JaffaCakes118
-
Size
133KB
-
MD5
158575ebf828b3ab412f47af28748661
-
SHA1
11e893f14e954f88a7b31e92c66b86f3f23134f3
-
SHA256
88d78120f851ffdd41c2d66089b099e43fc77285daf7bb707752a5f94e45cbe6
-
SHA512
bf0c1ade3ed82c1be1efb40140de49a09aedb23e45726d3f2a2470dde6f3787be53e2b7a192fe7b21cab241b7a3f59c2f4ef9afc8297b03c0a55f45c912e109c
-
SSDEEP
1536:8fMZYX8odpNaKTTWa1xPSeEip6IFvTgn03JHfK3kYqAiJSEWp70QRGlcvciDt2d+:8UeLvWajaeE6ZE20VNPf
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 158575ebf828b3ab412f47af28748661_JaffaCakes118
Files
-
158575ebf828b3ab412f47af28748661_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE