Behavioral task
behavioral1
Sample
JaffaCakes118_68869cc0475ce671c4fd584d5a761800.exe
Resource
win7-20240903-en
General
-
Target
JaffaCakes118_68869cc0475ce671c4fd584d5a761800
-
Size
285KB
-
MD5
68869cc0475ce671c4fd584d5a761800
-
SHA1
5440e6da869f906a2a7bae68b4d39ecb35e6f7b2
-
SHA256
8361913431105284496b526e76129935f4ec7539371de9f332a8bd315983c05f
-
SHA512
93f5f9259820b651243609a2135c7d62f1e32f822a27592553b50d753405e317d29f70a5b8c8c860e436e3c0e32f6ca00b477db8017001f68429caef4801378c
-
SSDEEP
3072:WStk3EHBRCYShDTOVoAUSu62DeIQnPATtwkb4ir:WuYEhRkDTpSdlPnPATeAXr
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_68869cc0475ce671c4fd584d5a761800
Files
-
JaffaCakes118_68869cc0475ce671c4fd584d5a761800.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 100KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 43KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 105KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE