Behavioral task
behavioral1
Sample
JaffaCakes118_084599299124c503adcbb6338bb0e2d1.exe
Resource
win7-20241010-en
General
-
Target
JaffaCakes118_084599299124c503adcbb6338bb0e2d1
-
Size
770KB
-
MD5
084599299124c503adcbb6338bb0e2d1
-
SHA1
947f131894c4a4f1113d9c5e056edb5386feb893
-
SHA256
31aaaa0c41d0449a72e9c523afcc9418e94e223e0919d8e6379b590770b17c78
-
SHA512
ffa5a2dfe8242f3ddcf50740c1b5a9ebc0954b38a33fd565d178a332f31c815cbfeb1c67ee0ab5e256b4281b2c07c5d9849b1a0e8afc33c435dbbb1fcf48d650
-
SSDEEP
24576:oQszbn28F/uz0l+W1w1Ncx2DaNZut1reaDcMyo:o/S8F/uzdNc646rZhb
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_084599299124c503adcbb6338bb0e2d1
Files
-
JaffaCakes118_084599299124c503adcbb6338bb0e2d1.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 172KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 767KB - Virtual size: 768KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE