Behavioral task
behavioral1
Sample
JaffaCakes118_928e481b07ce96d000fc71b8145ccc15.exe
Resource
win7-20240903-en
General
-
Target
JaffaCakes118_928e481b07ce96d000fc71b8145ccc15
-
Size
284KB
-
MD5
928e481b07ce96d000fc71b8145ccc15
-
SHA1
ee5c4995e1f5d258315d1562d148b7ae0b4acfce
-
SHA256
3e93e8a1d439cc1186310fdc8751822937012aa0d5f6556335d0d54e66c23a46
-
SHA512
84268ba72982e50fc3ed2a99376b3d5424486e2e1903067985337fe2ff8a072830315541377215be40619c997166471152ac997eb3261d73468a38f10e9ed216
-
SSDEEP
6144:GZC4d3lbxc6wU/UP+XhdMRFD3LAwekt5oSAjsNEkRLNsoAUk0:v4dMRU/UP4heFjLDFt5oS9R2Tr0
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_928e481b07ce96d000fc71b8145ccc15
Files
-
JaffaCakes118_928e481b07ce96d000fc71b8145ccc15.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 256KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 195KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE