Behavioral task
behavioral1
Sample
390a004502f43e3797039f1e164afc9b_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
390a004502f43e3797039f1e164afc9b_JaffaCakes118
-
Size
346KB
-
MD5
390a004502f43e3797039f1e164afc9b
-
SHA1
07307678d331dfaf533a62b1e7d8d0642b46e09f
-
SHA256
d3322a37004ceb5cb943bd20d4c87305a16c097b3c96383725ae2ce1f5ed2359
-
SHA512
a854afbb01d6e4398f0803e0d0fd378d982364450c59f71550dbfc2f04f6e8d886c375cd55533dacce4e3c7428c437fe3b5fd0b705b66b5c96ed24c5f33188c5
-
SSDEEP
768:y+odni0JV1RwabPv28r3y2TeiB2LBG/0jZUVaj9ia3iDhvZBfTrn:yXdXv1DbW8r3Jv2LBG/EUS4tFBFn
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 390a004502f43e3797039f1e164afc9b_JaffaCakes118
Files
-
390a004502f43e3797039f1e164afc9b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 324KB - Virtual size: 324KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE