Behavioral task
behavioral1
Sample
282061a61ff8d795261d58eb68501b44_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
282061a61ff8d795261d58eb68501b44_JaffaCakes118
-
Size
176KB
-
MD5
282061a61ff8d795261d58eb68501b44
-
SHA1
6e03d0b35fc797442bd0ca67767b55d5f0bfbdec
-
SHA256
b1b3064a909f8f35763a9551f34568f1218f6d63dccba04f2cbb9babfabd5acb
-
SHA512
287755efedf7d430eb334a94f1f9b28e75c4b0aef20774a98d2a01846d93645970fe96e689708f69b801967ed21051839f38a396ae53815f1b591d42a7288e24
-
SSDEEP
3072:/5XtwZGxiP8VkjFxJkQvtC1Rk8qCHl9MeG1hLvOLmZD1+F6bSaMxo16QTONDEedI:/VtEGxA8VKFxmQvo1Dl9QpGLmB1JLMxI
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 282061a61ff8d795261d58eb68501b44_JaffaCakes118
Files
-
282061a61ff8d795261d58eb68501b44_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 272KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 171KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE