Behavioral task
behavioral1
Sample
44f8a4b28cb04f07c443e90c2facf045_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
44f8a4b28cb04f07c443e90c2facf045_JaffaCakes118
-
Size
53KB
-
MD5
44f8a4b28cb04f07c443e90c2facf045
-
SHA1
72fac36d0772bfb8bfa886920ca097efbad91415
-
SHA256
dc0afeea97f376b7523a06fcbb02cc4fb0c773e60a34448164f38c117f157585
-
SHA512
ac2b89b959b1437bc4cd7ef39961ab7832cb4f3c41d1d9eda30bac458cd44bb47bda9e343d1d5d801dd4b3b61013aae8290e6eb3f8aa86a9698bc26c358faf98
-
SSDEEP
384:ZMlEvSMcGLc1gDoDxe+ol1tIgLbUqZjq+tTJvrprBT9KyuZLyAjHrU4yI+Tn:a8ZcGUgDiIlLLIr+lx1FTAyu1Vzy7
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 44f8a4b28cb04f07c443e90c2facf045_JaffaCakes118
Files
-
44f8a4b28cb04f07c443e90c2facf045_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 368KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 23KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 28KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE