Behavioral task
behavioral1
Sample
171cbefc4179440572eb137b65db294e_JaffaCakes118.exe
Resource
win7-20240611-en
General
-
Target
171cbefc4179440572eb137b65db294e_JaffaCakes118
-
Size
137KB
-
MD5
171cbefc4179440572eb137b65db294e
-
SHA1
d6810733d3a576aa83d059f67716f4033778b73e
-
SHA256
c08556d3e92cb3ce9146679255bf971c3e6289f59773a0b9fc6135459aad63ec
-
SHA512
aeab5f7478593559a19fac99f1914be58962007fcf4dd682aa6acecb6f3e3c34ab2f3956779fa9d15e529f4f9382c9911b15426e6b814af146e05520d52c4cb7
-
SSDEEP
1536:e4m5hdG78SadgsB6qAVmO1IrScroNmf97wNyic2fkf1a4HaBRr9wzdggaWL:eFk7xGgs8q9jf97y7c2fVYaBRBmgg
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 171cbefc4179440572eb137b65db294e_JaffaCakes118
Files
-
171cbefc4179440572eb137b65db294e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 39KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE