Behavioral task
behavioral1
Sample
263abce394756dbb110e7a3f9b6b96dd_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
263abce394756dbb110e7a3f9b6b96dd_JaffaCakes118
-
Size
184KB
-
MD5
263abce394756dbb110e7a3f9b6b96dd
-
SHA1
eaa904387a8a0ae35bc2f8d501d695ca2072692c
-
SHA256
b2764277f9b71caf0bedc6ade99808543615f14aec8e34907898e4cb13d496a8
-
SHA512
2efe2e5316d4b5b76cfe77a7e6a0de2041fc9b6d790b4984dc39350cf9b4f8a838c954d803bfd55d5b3715097a6f284d4135c865a7fb7fca4f332d0c9932e2c8
-
SSDEEP
3072:67cWb5outIL9f9sm2IyF4yrA/HDZFZhHNbAZ:6FNoSI5f4/c97hHN
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 263abce394756dbb110e7a3f9b6b96dd_JaffaCakes118
Files
-
263abce394756dbb110e7a3f9b6b96dd_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 200KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 163KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE