Behavioral task
behavioral1
Sample
30489c38052910a896e1c876679cca91_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
30489c38052910a896e1c876679cca91_JaffaCakes118
-
Size
181KB
-
MD5
30489c38052910a896e1c876679cca91
-
SHA1
205daef23f7197a65a2e63feafeff33374b1cbc2
-
SHA256
3453c332f4992da3dc5ec87cd3b7774b327c5fbd117aa478a70087a25d990b84
-
SHA512
86d4f86615aca40c9ea9b0ee71b2131631a36c36ccfbfbc9fb837dc410ee5de91cba24e4c68718f1fd6c7d87f8358766a869c2d316a41162a38cf500a605a0c8
-
SSDEEP
3072:HWT/nk6YL3o2Tcgy2NfUxcHsSXgDSi5KZYj8/aL1tfmJ:HWTvgL1wgy2NfRMSQcZ2
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 30489c38052910a896e1c876679cca91_JaffaCakes118
Files
-
30489c38052910a896e1c876679cca91_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 130KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE