Behavioral task
behavioral1
Sample
3a0785d527557a2f7018bcf46fc63221_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
3a0785d527557a2f7018bcf46fc63221_JaffaCakes118
-
Size
240KB
-
MD5
3a0785d527557a2f7018bcf46fc63221
-
SHA1
9a0f9594c1ec7dc3b4287d8ba0417c19102bf8a8
-
SHA256
0edd2ab8e4b0612de14dc31b1a3320a8a63f296aa1aa052de3bd1dfef674acf2
-
SHA512
eba94f2c9033385819cf81d6ffc88ade4d9991ec314d94897bdb57267e64fb06bdd0931796ed895bb9b7d94139417107365f49cd0150f01316e087653b15d638
-
SSDEEP
3072:Bzu6aytSpEMY7gg8GT+5S1L/kp4HKB5vvexZ0MYS2ogK7nwPfX8VMd5SYoY1p:0PcSpFu1zk4YjSdEEMKYZp
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3a0785d527557a2f7018bcf46fc63221_JaffaCakes118
Files
-
3a0785d527557a2f7018bcf46fc63221_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE