Behavioral task
behavioral1
Sample
37a8447a2613cb147d47564f76527db9_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
37a8447a2613cb147d47564f76527db9_JaffaCakes118
-
Size
247KB
-
MD5
37a8447a2613cb147d47564f76527db9
-
SHA1
94bccd82963e6b1f12cf1fa6e6888e74c1ead4df
-
SHA256
f0e10ecb0e11ada52cf15bf3d7e4e0210bdc59b26b2dd5f37cc0f42353b4f84d
-
SHA512
46876c0cd2e14f4b44b41f7852591de79832ed3beab5ce7ae125545cd4104c98bc326a786bf441f6e55c6b3699485244240140fc6fa5e9b74ce7849447acfb93
-
SSDEEP
6144:fTLweHIj+GMviUMoWexuPUlVGRj/n7t1TAzDoSgGUbZBlx/U:fTvoj+p3XWQtlgJZ1T6oSZ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 37a8447a2613cb147d47564f76527db9_JaffaCakes118
Files
-
37a8447a2613cb147d47564f76527db9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 852KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 240KB - Virtual size: 240KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE