Behavioral task
behavioral1
Sample
42a0380ab4e34c1e26e16a2e3e9257d4_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
42a0380ab4e34c1e26e16a2e3e9257d4_JaffaCakes118
-
Size
52KB
-
MD5
42a0380ab4e34c1e26e16a2e3e9257d4
-
SHA1
eddf2821d053febb4b8f4df669272441f5cfbe9c
-
SHA256
6684c1a88aa487d8e7df5308361a7c99cf573d1c667d4dc8422dc91669460551
-
SHA512
14ee010a7c025895a0bfe85d338c0eb2c84faf2dda792f9a7225fcc1b20a903baf890cee1ce6de72e8417f47d469c4ea27105a00a9a9067f8be83552b7d3a72d
-
SSDEEP
1536:RqAMqgKrxqC5+0ExCPWhsGw+k/nouy8E:Ruqgqxo0ShzWvout
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 42a0380ab4e34c1e26e16a2e3e9257d4_JaffaCakes118
Files
-
42a0380ab4e34c1e26e16a2e3e9257d4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 72KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 47KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 4KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE