Behavioral task
behavioral1
Sample
386e8d78b210bd51abc4196696932ab4_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
386e8d78b210bd51abc4196696932ab4_JaffaCakes118
-
Size
95KB
-
MD5
386e8d78b210bd51abc4196696932ab4
-
SHA1
2d12ca586e534ee9ab1a02b450c8a184d611de45
-
SHA256
0635c9d2e7beef45aa38b43ae156b529fe41318fffc05c561cce9efcb630e861
-
SHA512
b842ad49eae21ff12fefd969d5045edcae557dcfff19ff8308f1baef4141cb1840fc721797a012fe5ad54ec4ddf71defe3338a5bd1738bcf41931193a5c102c6
-
SSDEEP
1536:HA3j0td/DwGVlzdB3d59pUV38Hy6RWaX1cqaOzYndpgyfRnK54+7s7YbajeherwR:HMqLXjPP8V8HHaqr2OaRK5xmYbcYe6
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 386e8d78b210bd51abc4196696932ab4_JaffaCakes118
Files
-
386e8d78b210bd51abc4196696932ab4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 428KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 94KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE