Behavioral task
behavioral1
Sample
28e3917a36c962b2936f82a4926725da_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
28e3917a36c962b2936f82a4926725da_JaffaCakes118
-
Size
297KB
-
MD5
28e3917a36c962b2936f82a4926725da
-
SHA1
ba79a30d5fd1837d3ff2e04b1eac2d051dd87add
-
SHA256
f5be179c60e8cda776737eb693cb5aa74cfb47fd0d3bc190c52bb6bf15886935
-
SHA512
d2ea2a0f161734d116bae19fcdd69332ce68b74d9029a0e977b962cf398c3224c89368a898cb19ccdfbdbefd123907513dffa88b69c5bac09706312771d513d3
-
SSDEEP
6144:kjjycZdmg233XsSAIXo9j9dVSBrYIWXOv4BK3AN2blIYL83cBQ:AJc733XszI6iM+LQ8RIYL83c
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28e3917a36c962b2936f82a4926725da_JaffaCakes118
Files
-
28e3917a36c962b2936f82a4926725da_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 496KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 288KB - Virtual size: 292KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE