Behavioral task
behavioral1
Sample
388c43a51b8edb4aac85cefe7b26add3_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
388c43a51b8edb4aac85cefe7b26add3_JaffaCakes118
-
Size
1.5MB
-
MD5
388c43a51b8edb4aac85cefe7b26add3
-
SHA1
3d379533662c5bf6b803b527c7fe828a8a93efa8
-
SHA256
46284f96b65099a10417f5c9ce727565d0db0d65eee75172f370001c4eccd41a
-
SHA512
efa118ba78f3115c41fd1441057d0dba6a41ca80a479ccfc06d7acfed6b15f93c39359b3f48d61883f191f4bbd8ba62f5c6c3f2c1f903b3cfe76f2175ad061af
-
SSDEEP
24576:TG+RTcGc65uWNcyRkR8+rpQhMdi6nWbHm9X4NV7u2oYXbW:i+RoGJ7wR8+r6h259X4yJgb
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 388c43a51b8edb4aac85cefe7b26add3_JaffaCakes118
Files
-
388c43a51b8edb4aac85cefe7b26add3_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE