Behavioral task
behavioral1
Sample
3a5c594439124c68e4b75e62d150718b_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
3a5c594439124c68e4b75e62d150718b_JaffaCakes118
-
Size
91KB
-
MD5
3a5c594439124c68e4b75e62d150718b
-
SHA1
3c2b4de063eb415f94f1960b5e76e194cb7a88a0
-
SHA256
9d229ae0c22756b70cbf710aa59d0cf60553cc0bc55cddd667248364fd379d65
-
SHA512
3f4cd73c6e3906547e1f19bf0e089f01dc726dec85374b68768cd0f78389fce6510ed38ad0287426088744d190ff9ff201ef087cd423ea97cae2318bce141867
-
SSDEEP
1536:px/am16XovcjcTiGAfJYbjMkqFzNlqTgV9Cc3Z7esMEnyGZ7ZPp10snouy8v:b/h64vLTUCbgkq/lqTgzYsMEnyGfP7r5
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3a5c594439124c68e4b75e62d150718b_JaffaCakes118
Files
-
3a5c594439124c68e4b75e62d150718b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 724KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 89KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE