Behavioral task
behavioral1
Sample
39a6f5b5dd3f8adc6f9c71ec41c11c4f_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
39a6f5b5dd3f8adc6f9c71ec41c11c4f_JaffaCakes118
-
Size
45KB
-
MD5
39a6f5b5dd3f8adc6f9c71ec41c11c4f
-
SHA1
d8995ea18fe79aed482b16837489ff620fa093c3
-
SHA256
1ec6069f0a15d72c7d646252ab750f86eaad792dbcc2d79286a1dd830f5ed34d
-
SHA512
eda5048820d105db2da1f819076bd55ea3657c559a7080d293fd22ea1005f74dca4f50fb0f926c6dc6b065227166559d07e7bf6f1743dd55cca063c28a44844b
-
SSDEEP
768:HKRKgSjc29SkQ6GAdwKBNfg7aWho8ZrqSA0Kg7DSAMy8lsxlb:HKkgSjHlwKBrf8ZJ2AM4
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 39a6f5b5dd3f8adc6f9c71ec41c11c4f_JaffaCakes118
Files
-
39a6f5b5dd3f8adc6f9c71ec41c11c4f_JaffaCakes118.exe windows:4 windows x86 arch:x86
7a7803027531302026dedc7b5f6025f2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
Sections
UPX0 Size: - Virtual size: 412KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE