Behavioral task
behavioral1
Sample
93cc36f9d908ab79fff53e54542d880b_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
93cc36f9d908ab79fff53e54542d880b_JaffaCakes118
-
Size
5.0MB
-
MD5
93cc36f9d908ab79fff53e54542d880b
-
SHA1
787066576fb09420235f8cade5f47adb09fa90fb
-
SHA256
1bcc83738c20ba5bd6fbb2ec939c846a760f5c2e7a154231087940915897b1d3
-
SHA512
c8500e3ce4b0421ae22ce8384f654d3975dff88045570e1f482d0b9655f99f2c000f0ba8bf4ce84fe10b78d2ac9f92b616ce14c37819d103fe6349fd4d339fee
-
SSDEEP
98304:1lEwLmJgKom3yxHd0ah0zcz226czxd3hyQoTuIK9ssuueF/:1S/ovh0zcz26zv3loTu79srr/
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 93cc36f9d908ab79fff53e54542d880b_JaffaCakes118
Files
-
93cc36f9d908ab79fff53e54542d880b_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 7.7MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4.5MB - Virtual size: 4.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 499KB - Virtual size: 500KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE