Behavioral task
behavioral1
Sample
400933e145180bf372c67d975dd26efa_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
400933e145180bf372c67d975dd26efa_JaffaCakes118
-
Size
756KB
-
MD5
400933e145180bf372c67d975dd26efa
-
SHA1
733191728bda1326e52660a7d43bb041140c4295
-
SHA256
b0954a867f505ae4a0354ab373b8259118c0973ec037709c5873744f6928dedc
-
SHA512
4ed67486f8c3e66d83a50632f2e08147b9eebc9519c64269c4f95c4fe01e4ebe92b18d87a4e3cd5dbef8c142a0e74888838093865337ff21c779bbdd3284ff83
-
SSDEEP
12288:7p3WFcMp1QLd0hM35NeiNVfpnzrCfm9w9Yn5p2/mYWl6yB:N3McMpKmGpNlVfpnz+79YnFYW1
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 400933e145180bf372c67d975dd26efa_JaffaCakes118
Files
-
400933e145180bf372c67d975dd26efa_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 376KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 337KB - Virtual size: 340KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 159KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE