Behavioral task
behavioral1
Sample
264e3727bee819e1bc08fed91567592b_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
264e3727bee819e1bc08fed91567592b_JaffaCakes118
-
Size
26KB
-
MD5
264e3727bee819e1bc08fed91567592b
-
SHA1
8cd5f9cf25caafe7694a66ee4db070c3e2b90860
-
SHA256
e1b1b531f8206d7d5b0c1d42d5f350331e2a7ff197d52a3e7e4e78b608ee5ff2
-
SHA512
c1feb27e7ca7bc27e88b1e800bf8105d4ec4ec209b3abca787757fe9cdcd3a720d9875d5a477f368bae0ac8a6449673971df1ee5a8254c1c112be3832d967250
-
SSDEEP
384:rNUhpqALcNuyx6L9oTqzXRsHogrs/q7Hp1AXtQNek+vD1Ne0:i0AQNNSiT+OHogrs/sH7E
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 264e3727bee819e1bc08fed91567592b_JaffaCakes118
Files
-
264e3727bee819e1bc08fed91567592b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 224KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
.rsrc/0/version.txt
-
.rsrc/1033/GROUP_ICON/103
-
.rsrc/1033/ICON/1.ico
-
.rsrc/1033/ICON/2.ico
-
.rsrc/1033/ICON/3.ico
-
.rsrc/1033/ICON/4.ico
-
.rsrc/1033/MANIFEST/1.xml
-
UPX1