Behavioral task
behavioral1
Sample
390f7d3a901c3ec27588438d84ef3437_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
390f7d3a901c3ec27588438d84ef3437_JaffaCakes118
-
Size
146KB
-
MD5
390f7d3a901c3ec27588438d84ef3437
-
SHA1
66b73404aba43d634f2051cad4c3a5318cb719a3
-
SHA256
78c3539aa423666d8690e338d07f143abb1c8be3b76d33a322c0019eb708b7ce
-
SHA512
9bdaf489e1afcc6daabacf1efef39257917a39d49b2fba748bc8ed767f4332271fa50e605f128538863b57f060940c85124b72d964c399b575a63739cebd25c8
-
SSDEEP
3072:CN0LwH/hUmnWMIukM38TrcAXJGnuMcwyBtJLt5Aqo1txON8q7w:CNxPNIQ8ETucyVAqgtgdc
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 390f7d3a901c3ec27588438d84ef3437_JaffaCakes118
Files
-
390f7d3a901c3ec27588438d84ef3437_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 204KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 97KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE