Behavioral task
behavioral1
Sample
44482a0620e4a5a2fb9d84a79447f6f3_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
44482a0620e4a5a2fb9d84a79447f6f3_JaffaCakes118
-
Size
459KB
-
MD5
44482a0620e4a5a2fb9d84a79447f6f3
-
SHA1
bfa2e9a13f6e09fa0b39f50f105a870e469477fc
-
SHA256
5fc015b843d2b0db5757591e0144ac925ef5c72d9d0d58c5158f0da8ff9ca878
-
SHA512
9aee0f01ec7fc1ae8b6ee74e6ba856010c2f2ffe5afd2480bc141c71171e87c25a676096452bee2665c5a485d5e4e4f4b7212c214fb3e0211e76861c8bb35c92
-
SSDEEP
6144:Y2KUrit70Vl4neIq1GFiJbDRFUno6ZmQCUhsd6lLoAaNvGv7d4SnOmcOLJcIn5:dk70lmgNfn6ZmTU6oGo7dBOTOLJcM
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 44482a0620e4a5a2fb9d84a79447f6f3_JaffaCakes118
Files
-
44482a0620e4a5a2fb9d84a79447f6f3_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 588KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 195KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 107KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE