Behavioral task
behavioral1
Sample
JaffaCakes118_7b596cc93a4857c08cee957de7136e71.exe
Resource
win7-20240903-en
General
-
Target
JaffaCakes118_7b596cc93a4857c08cee957de7136e71
-
Size
339KB
-
MD5
7b596cc93a4857c08cee957de7136e71
-
SHA1
eb8e7bc758a9b541ec453d240d05205d7011da24
-
SHA256
3d6ac7cb94caf5cd4da79e2fda720955fd0b8da207f8f738cf7d32f63a6c0091
-
SHA512
91ce6fc7f7c7c7bd9fc96d4d10cb345ccebaf757fea6525ed6344bff70947d1d3febbb26e744b2dd465f416f4d944935a64509627ad02433afdaf5dbff0fee6e
-
SSDEEP
3072:7YAfxX3lz4WR6IM4lGTMEe4ZhOG8JlTv0rpl:7Ygh1MbEkOGkzyp
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_7b596cc93a4857c08cee957de7136e71
Files
-
JaffaCakes118_7b596cc93a4857c08cee957de7136e71.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 240KB - Virtual size: 240KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 72KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE