Behavioral task
behavioral1
Sample
387afcd3caf08b4eb287b685ea662008_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
387afcd3caf08b4eb287b685ea662008_JaffaCakes118
-
Size
352KB
-
MD5
387afcd3caf08b4eb287b685ea662008
-
SHA1
190eebb28de863c5118bce42eb17d142ea3d0836
-
SHA256
c0501ef928b1fe8c6db822bd40853e52a285240581d2b4c98b6e38820efe6514
-
SHA512
2211ee7a9e75d87c01a46d76da96cda58842074ac7185d5383ef7c2c21e1130ae5539b038302ef19cafb8dd0bd7243110a483b4e3fffc58f319b26dbfa90b524
-
SSDEEP
6144:IGtnpNygWoVycA0dd6q3vsfxJsFACQZy4JRJg3MkHuN8Q0ISxikDH4szrNFoS:IGB6jSd6qUfjA8y4vJg3MkHuNJ0OmYsx
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 387afcd3caf08b4eb287b685ea662008_JaffaCakes118
Files
-
387afcd3caf08b4eb287b685ea662008_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 156KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 339KB - Virtual size: 340KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE