Behavioral task
behavioral1
Sample
43dd6893e688918d06e78501119a2531_JaffaCakes118.exe
Resource
win7-20241010-en
General
-
Target
43dd6893e688918d06e78501119a2531_JaffaCakes118
-
Size
233KB
-
MD5
43dd6893e688918d06e78501119a2531
-
SHA1
5fe009cc7573282ded2230c76f532e8d91dcfd6e
-
SHA256
4a46caf03090893dbe351ef07a90f193eef62acc7b9edea860978bfbf0a586ce
-
SHA512
b22a7a6baa82ea5973b292a17e54a29079465832624c941b300f8e9292079b930efe69e402e26e9c062540fcb0e824bdbe886f886b4e005bdac042985a7fa0d7
-
SSDEEP
6144:EWgq4qJKmGni8tzsGreB6IM4gkzjgqdnOPoS2c:Vg9qd38Cn4ar/gqMoS2c
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 43dd6893e688918d06e78501119a2531_JaffaCakes118
Files
-
43dd6893e688918d06e78501119a2531_JaffaCakes118.exe windows:8 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 160KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 228KB - Virtual size: 228KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE