Behavioral task
behavioral1
Sample
182384b49589c68dbb8682fe5fee121a_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
182384b49589c68dbb8682fe5fee121a_JaffaCakes118
-
Size
199KB
-
MD5
182384b49589c68dbb8682fe5fee121a
-
SHA1
cef2313321a474efb436a65982b8243c6d7fdee3
-
SHA256
e51ef3addc5eb2c3cfd6f099c0173e6bded578f8f94163304cc9d7e9bd268535
-
SHA512
0841f01a8ec6c25a90bf3a25ef4d65a50e2a6d87a85113bee4d7fe77f7b781b60485d061d8bb1566d5b7cfb1942735ca38b71f409431897382dc319941be9caf
-
SSDEEP
3072:5bjLOmhq9kPYOdwu9Rs/8ALk9Nluzim04XChXXQN3JfL+d/k8NE7FJixH:RamRPYOv9nALkXlub0NXXQN5fyVkxSxH
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 182384b49589c68dbb8682fe5fee121a_JaffaCakes118
Files
-
182384b49589c68dbb8682fe5fee121a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 34KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE