Behavioral task
behavioral1
Sample
417ace8c3b084c26edf016084bc79074_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
417ace8c3b084c26edf016084bc79074_JaffaCakes118
-
Size
131KB
-
MD5
417ace8c3b084c26edf016084bc79074
-
SHA1
5dc471e10fa0e47c261ae2b995039bdc481ca6b7
-
SHA256
c6b0953c764668098283f009bc647184cbc78f338dc4895e2fa3d068b2862f71
-
SHA512
5849f3f18c3fd801521e2d38db7c09d35ccd80c52a59166c2f3075ed0ff63048233f40ccb66503f5dd5d6b874f1bc6f5fa3eb1ac8a71701a2dc4afb2cfe9a4c7
-
SSDEEP
3072:h87j0KS3W4R+6GVWpWC7ZpZygrwpCZc8oAA1F:hbKARYWpxTygrw8m8u1
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 417ace8c3b084c26edf016084bc79074_JaffaCakes118
Files
-
417ace8c3b084c26edf016084bc79074_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 392KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 123KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE