Behavioral task
behavioral1
Sample
289ec42b65b7a6aa06ec4de62a967d24_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
289ec42b65b7a6aa06ec4de62a967d24_JaffaCakes118
-
Size
133KB
-
MD5
289ec42b65b7a6aa06ec4de62a967d24
-
SHA1
f90c81f267164c1610d61f29745bcace08f5ef4d
-
SHA256
fde2a04beab6790b25f81b61db9650bf58d550877659869b0b942c862f79c585
-
SHA512
76995a36a3ffce6454ab92c9e708d8fce47be7fa53024074aae1a4fb8298812f31d8a3bec59d54510d7fc65f044024f899a6a8131e226bbf23ee35507e58f0fc
-
SSDEEP
3072:r4Xxt4Hlkg1O376ihAMYnnwXtCbnFsr8B5i69Q:Ez4Fkzrph7YwXtGUK5i69Q
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 289ec42b65b7a6aa06ec4de62a967d24_JaffaCakes118
Files
-
289ec42b65b7a6aa06ec4de62a967d24_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE