Behavioral task
behavioral1
Sample
293c4aa67871dc24fbc9af6523de9152_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
293c4aa67871dc24fbc9af6523de9152_JaffaCakes118
-
Size
392KB
-
MD5
293c4aa67871dc24fbc9af6523de9152
-
SHA1
4a4d384b9517bebfce01373c54f2eb257fe6766a
-
SHA256
7adc7bb24d38759fd3d37cb18a0c56761c671df0ae01b7435cbad9a4c17edd15
-
SHA512
8950f5b20d8d22be1ba63f212a7a998c3fd649f2ed74180e28b1659f4dc3d6e772d050eaaceed836d36a3571fd8ca96a91c26b13c75dfa4454b19af0bf30f2fc
-
SSDEEP
6144:sqtUGwknCxbh1s0i0H0IsJbL1hV+zuWonHIx7C:3tUGwknCFsdhJjV+Cnl
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 293c4aa67871dc24fbc9af6523de9152_JaffaCakes118
Files
-
293c4aa67871dc24fbc9af6523de9152_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 232KB - Virtual size: 232KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 148KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE