Behavioral task
behavioral1
Sample
42313770ac5a23f4393b19d4de0177f6_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
42313770ac5a23f4393b19d4de0177f6_JaffaCakes118
-
Size
136KB
-
MD5
42313770ac5a23f4393b19d4de0177f6
-
SHA1
3b0fe3b63ead008917ba715b92b1a5a73186fc3e
-
SHA256
36cc28af020b6246b406a9059f484f7d4aa7f0babbca271b499b72ea9d927b2f
-
SHA512
4eee6495a2ea1b51e69b4d26c551ca56b5a489f37aa60c64d647e285893216a5cb4e7b2a459c548161c94fdce95aa203f666838797ed69abb8968b5a50869a77
-
SSDEEP
1536:RCtk0Qpm1n75hKrFa0sDa3PXCdgmqsOps8b8hnKXh1rpa0sDa3+:Rk3/n75hOa08a3PSdH86nKXh/a08a3+
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 42313770ac5a23f4393b19d4de0177f6_JaffaCakes118
Files
-
42313770ac5a23f4393b19d4de0177f6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE