Behavioral task
behavioral1
Sample
114e7ba2c31231616c08a31a97b8555d_JaffaCakes118.exe
Resource
win7-20240215-en
General
-
Target
114e7ba2c31231616c08a31a97b8555d_JaffaCakes118
-
Size
784KB
-
MD5
114e7ba2c31231616c08a31a97b8555d
-
SHA1
bee7d3389ccf1f2c11cea83743c94b7411404cea
-
SHA256
4e9bc7fd6e1fb4a0b93be6c9ead0fc7a61413fb03ee7c6b1f417c86e8936ad7e
-
SHA512
ecb6467fe916f0d48f32e7acb733f02cd26a3789a1928e2940e3ddfcebc9473cdd3da1c419a9e958c02715cc468c1723fa82a64129ff5d0e080a86fbc338d629
-
SSDEEP
12288:lxSXPM9geRblQ0nAV6JdwYLZj4+gnuCbxlOUyWuAY6PDYIHgbx638ZtdM4ed:lxSXPeRblxAk3we9SbxlaWuAmxwKtU
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 114e7ba2c31231616c08a31a97b8555d_JaffaCakes118
Files
-
114e7ba2c31231616c08a31a97b8555d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE