Behavioral task
behavioral1
Sample
252d20eb362efda4ee3ab660c62a295f_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
252d20eb362efda4ee3ab660c62a295f_JaffaCakes118
-
Size
50KB
-
MD5
252d20eb362efda4ee3ab660c62a295f
-
SHA1
6625261f24b6eaa5a5bd76b3777f9b3c6e4a92fb
-
SHA256
a35ec9b01e3f3fd4bac13ff25eb83e309dc49abc6c0b157cd42689e4e5721280
-
SHA512
162051577c0c8cfa835666d1c27d6f583354ed2c21a67fed6abe3436369a9dab3be1fe5cceed32c9605cf1031f0a485b300a60a4f5f31d7aa5aa1efeddbcef02
-
SSDEEP
1536:VnRbnHu68xxOzinouy8rTWQLC2wFxPn4Jx4uu4u8AaEC5:tR7HuvXOz6outrTZnwr4Jx4uu4u8xB
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 252d20eb362efda4ee3ab660c62a295f_JaffaCakes118
Files
-
252d20eb362efda4ee3ab660c62a295f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE