Behavioral task
behavioral1
Sample
1682956c99e09f33ab490651797209bd_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
1682956c99e09f33ab490651797209bd_JaffaCakes118
-
Size
76KB
-
MD5
1682956c99e09f33ab490651797209bd
-
SHA1
c03709d3b2b144147b1883b76cd17f8fdd67d48d
-
SHA256
c8b4868724071f847c7159519bcaa7cd30a493e4f27d6f4713e5232a79a60b1d
-
SHA512
90a3de32d8dbe715e87f12452be7caa207c4e08f91827179669985e3302af63eac69d932a74b5098cfd9338936fe380732b10e8f7363c605c16f7edca73aab84
-
SSDEEP
1536:4wOKeqtUAcu3jQ6BMlBitfXAMgOYrEP/3Y9ZOagjf5dm7W:2/KzccfvgOYejjBM7W
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1682956c99e09f33ab490651797209bd_JaffaCakes118
Files
-
1682956c99e09f33ab490651797209bd_JaffaCakes118.exe windows:10 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 128KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 67KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE