Behavioral task
behavioral1
Sample
28dcc7596577fcd1a123a739398548f9_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
28dcc7596577fcd1a123a739398548f9_JaffaCakes118
-
Size
338KB
-
MD5
28dcc7596577fcd1a123a739398548f9
-
SHA1
3d2a00521cc9d5fdc38e13a4341f9a5e871fc4e1
-
SHA256
3477a7f837eeabd8bc6e7c9828e470239b3fa95391c43fb2587bb02273cdca4c
-
SHA512
5aaccb20ce80df8a1edfe2b1f07e1d75f5c4ddc30f5a14c2b55aa5eb9616c0b728cdc3dc51bb2a58d48eaea0e7c3c6133c9fce5a8943c99b64588bdb397a4558
-
SSDEEP
6144:lEM0e3y70cNjOcm9BBm5SqES82Z6L2Bh3CsRO0XmVD+7IoSJk2:70w4hOhBmzES8szyHCEoSJk2
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28dcc7596577fcd1a123a739398548f9_JaffaCakes118
Files
-
28dcc7596577fcd1a123a739398548f9_JaffaCakes118.exe windows:8 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 140KB - Virtual size: 140KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 192KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE