Behavioral task
behavioral1
Sample
38b6a3d79ee7a76873e2400743d18b35_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
38b6a3d79ee7a76873e2400743d18b35_JaffaCakes118
-
Size
1.1MB
-
MD5
38b6a3d79ee7a76873e2400743d18b35
-
SHA1
bf6956f0ba0191d86de917440d671f1b2ae1d2f4
-
SHA256
01494f8ff9d7c2c0f4e4a7ef0935bfa7f65b2ff4a2ba57fee488c688bfc2e35e
-
SHA512
ac5dd2189d1d427a7f018ec8d937646335d23728e554d9a30be7129969032fa2d6470ee888071cf69cf8b9668ff300ebc4428cc15f83045663b877565cfdca0a
-
SSDEEP
24576:ws7jLO8s0L7vfedzTyW58u3UaDbtWBKTaXw0v6Tn:tD1p4HyW+lafIBKTaF2
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 38b6a3d79ee7a76873e2400743d18b35_JaffaCakes118
Files
-
38b6a3d79ee7a76873e2400743d18b35_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 580KB - Virtual size: 580KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 485KB - Virtual size: 488KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE