Behavioral task
behavioral1
Sample
281283c3b931dacf89dda617f1fad4b7_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
281283c3b931dacf89dda617f1fad4b7_JaffaCakes118
-
Size
23KB
-
MD5
281283c3b931dacf89dda617f1fad4b7
-
SHA1
1b3e0c4c757b20d716fbf919fefe895acd06c69d
-
SHA256
05dbe7334ab42efb1e14efaa11a923344620c4cdd82fc089879a1671f44e533d
-
SHA512
09d6a3347ab25c5587ceeacf0739f28a098a20bb9596c986b3a39b63425eedd1f3cbaa19c5387a41eedc8a4dc65de0189cc83324ab75da6d4d2b8a6c3c3d4075
-
SSDEEP
384:jfTAy2wjS8UPlc1AtEn1h0Q5mo6ywTp1pNnJVC0uiJWu6zQgP:LgOAX+n1h0Q31wN1plWv
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 281283c3b931dacf89dda617f1fad4b7_JaffaCakes118
Files
-
281283c3b931dacf89dda617f1fad4b7_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE