Behavioral task
behavioral1
Sample
171276171653e3e172b3f7fac258d6c0_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
171276171653e3e172b3f7fac258d6c0_JaffaCakes118
-
Size
529KB
-
MD5
171276171653e3e172b3f7fac258d6c0
-
SHA1
71fac89ba62e6bf58ad18d0479047f79b074234d
-
SHA256
684266c5eb8fa40d21caed43f33ad19344e2f233e8295faa9ce44ae5ef56fda0
-
SHA512
a57618c78f0365f171ead23badbf1495bfc21552de814a98d52355d3e3b6397bda62f72ae029f4f0c2ce00aede4fc91353892c460de381b20ebfcaafdf9c6fc4
-
SSDEEP
6144:2zh+ABi9RXyRbFzFKrR/E43nJSkxcFzUQk2fyajGDZxQqMznYG40emtZt+vy3Qz2:2zh09xyR5z8c43pGHbfpjGXbMuJ7hz2
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 171276171653e3e172b3f7fac258d6c0_JaffaCakes118
Files
-
171276171653e3e172b3f7fac258d6c0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 300KB - Virtual size: 300KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 201KB - Virtual size: 204KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE