Behavioral task
behavioral1
Sample
39775d878db08207aa57e9f69c3f328f_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
39775d878db08207aa57e9f69c3f328f_JaffaCakes118
-
Size
784KB
-
MD5
39775d878db08207aa57e9f69c3f328f
-
SHA1
4239a08c7d60ea8b92a63855b76ed9343ef96476
-
SHA256
97350c2d0e920aab2baf7c963b64207291eb3f4414ac1bbef1ad9002c37eb4b8
-
SHA512
163b491e29ba42af7ac0dff07d1dd67ea73f2413a232abecdafe839d9b4f16aed0fb94a358956523f685e4dbd4ef0cc3c5735a5e3e5704d9621e348259ada59c
-
SSDEEP
24576:EFVMGhI036tAvdJmIfEI4oOiKXKr1O5WBA8o5mSyuBegq:EXpZ/mTOOiKXe1O5WBGVyuM
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 39775d878db08207aa57e9f69c3f328f_JaffaCakes118
Files
-
39775d878db08207aa57e9f69c3f328f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE