Behavioral task
behavioral1
Sample
f013235bea6dd51ffa7a2289b4ba6c74_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
f013235bea6dd51ffa7a2289b4ba6c74_JaffaCakes118
-
Size
784KB
-
MD5
f013235bea6dd51ffa7a2289b4ba6c74
-
SHA1
360bf622229c3d8b9f0cff0e832fc6e3a9219e89
-
SHA256
bff99f5cbc2740be911ae684750f494252617c02e48aa6bb92c8cd206247ad16
-
SHA512
10c8d0d74ee7bd39e36cd4d8322979e98c0bbfbcf42244b2a34e854a3d13ef7d067931e2f8418e1631a75888996c75796eab389ac34363874f902784842ddb98
-
SSDEEP
12288:NDEwVTlGpHOghePQK5dUxssqm3z/gSVFUFRz2VE2uAmK2/AxePZ9VQYrNEIYMNMf:ZEwVhkH9ePQKvDmg2W2uAmK2Iev2ID2
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f013235bea6dd51ffa7a2289b4ba6c74_JaffaCakes118
Files
-
f013235bea6dd51ffa7a2289b4ba6c74_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE