Behavioral task
behavioral1
Sample
30a732512e12ffd8b9c816e1c3d3c955_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
30a732512e12ffd8b9c816e1c3d3c955_JaffaCakes118
-
Size
366KB
-
MD5
30a732512e12ffd8b9c816e1c3d3c955
-
SHA1
3ca3bebdfd733be5fc2006fa3612bfed43e04209
-
SHA256
b923701caadba9a5caf67fb538dadc2c2f13c060b62b525160c8388b1a8d8d3b
-
SHA512
99435db856d660d3ee4703341c61d546844034534845ae3114882e303a7cc0257dd5647a15106e7b6544042802d29f3565276b2e33ff2f33d34036ba6a48848c
-
SSDEEP
6144:DK6Mef2hT3kxVyTgSYBw5e0T/e6va3ZUIBMY/ZCu32YiCnBdZ:TMBhw7yES1sge6va3Z/MYBOXCBD
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 30a732512e12ffd8b9c816e1c3d3c955_JaffaCakes118
Files
-
30a732512e12ffd8b9c816e1c3d3c955_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 92KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 73KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ajfudas Size: 76KB - Virtual size: 76KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 186KB - Virtual size: 188KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE