Behavioral task
behavioral1
Sample
43118a46825c1adcbf0bd8f63926713e_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
43118a46825c1adcbf0bd8f63926713e_JaffaCakes118
-
Size
453KB
-
MD5
43118a46825c1adcbf0bd8f63926713e
-
SHA1
1d163dfc26fb23f9d0ebf171cb4e45a2fea2b21a
-
SHA256
dd3a616f07944ea50b11508b32cc1366af81d4effd0be5e65504a2702c82ce0a
-
SHA512
b1e5c0e412b31b256e3c9bc8bae278f536a721ac63349ae3324359132423d850a4cb0b447d60a9d03ce0170d375028da209db84cd28ca6ef4398eebc8d620b83
-
SSDEEP
6144:D3IY98zX/7ngMue/5wddI427TIPRXOEuqxK2iuE/KQ7WQCMKMGPd46eYJynuBIlz:kcusC5uaUpl/K2ir/Iyq46eY8huiZ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 43118a46825c1adcbf0bd8f63926713e_JaffaCakes118
Files
-
43118a46825c1adcbf0bd8f63926713e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 892KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 439KB - Virtual size: 440KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE