Behavioral task
behavioral1
Sample
38896de4901afa68d22717132cbc5239_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
38896de4901afa68d22717132cbc5239_JaffaCakes118
-
Size
238KB
-
MD5
38896de4901afa68d22717132cbc5239
-
SHA1
bf2b32a1f874fed48a054b0d4c9c2b90b5c37c06
-
SHA256
843910d536bf1131df64c5c045a1a26d0e31f72fa951171e32ce60bfdf9dbc6e
-
SHA512
26abd1e40d10eabcac81fde6c68cb78c97467351c85cdfb6b93e3788467c6c01178d0b22e36af5f6acdb2d20de3482277a9cbfa434602953e193a97fba968668
-
SSDEEP
6144:ZxIma+j5HOLAYI+5528aREpUtsRFmfvHuOZkTr1:xa+j5Cl55/MwUto8K
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 38896de4901afa68d22717132cbc5239_JaffaCakes118
Files
-
38896de4901afa68d22717132cbc5239_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 144KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE