Behavioral task
behavioral1
Sample
302844d0de3aa5e6137f4737184997f8_JaffaCakes118.exe
Resource
win7-20241010-en
General
-
Target
302844d0de3aa5e6137f4737184997f8_JaffaCakes118
-
Size
282KB
-
MD5
302844d0de3aa5e6137f4737184997f8
-
SHA1
e86277a21b77d9a7194c34feec3070331e0fe394
-
SHA256
b3a5321aa2a9481158531e21e9e3882e2f32a60664112bc5e269cac1c782eba9
-
SHA512
98bd236c0b47753380be8ab8465ee8cf5090b6c4d9b1c50dfa42d367f7b4494b68e8099dc101ed268cc37eaefcb3e7d7122910e75dad8bd20fc05ac0461750e8
-
SSDEEP
6144:KzxGrI7UVELLGFeb/OwuvkhMKLau72lMNDY8PoS4w:qxGk7DL0m/XuGMk72668PoS4w
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 302844d0de3aa5e6137f4737184997f8_JaffaCakes118
Files
-
302844d0de3aa5e6137f4737184997f8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 592KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 261KB - Virtual size: 264KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE