Behavioral task
behavioral1
Sample
299782dd0055ce3a7c342fa4dc190d29_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
299782dd0055ce3a7c342fa4dc190d29_JaffaCakes118
-
Size
370KB
-
MD5
299782dd0055ce3a7c342fa4dc190d29
-
SHA1
bedbaa31916c73176d6a06185198b8d78f36fd60
-
SHA256
bcd8e94d19023af5c01bf4ddbae71bd700bc6638389fdcc0af155596850a04a6
-
SHA512
6795c3e6250b787767434ebe2296fc9b8f0e04b5f0e575b0a6ccf5b836463611fd1400c3357e2c89e81c46aa4d682a95d7346f63f3a1bc12cd9a8d1f4461672d
-
SSDEEP
6144:nQRJC3ZaWDjk0QUgqUZl0ei6s085+DCQt2jIOeWWXLtaXB3jmYYrgEO6gB5fM:8JWaWPk0bTY1iX08QHtap1iLtaljmYS1
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 299782dd0055ce3a7c342fa4dc190d29_JaffaCakes118
Files
-
299782dd0055ce3a7c342fa4dc190d29_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 365KB - Virtual size: 368KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE