Behavioral task
behavioral1
Sample
192c78ed5d0a90fac2cd12182d75f7a7_JaffaCakes118.exe
Resource
win7-20240508-en
General
-
Target
192c78ed5d0a90fac2cd12182d75f7a7_JaffaCakes118
-
Size
784KB
-
MD5
192c78ed5d0a90fac2cd12182d75f7a7
-
SHA1
f04fea184f572fba70100571faed83082eaa3bf7
-
SHA256
d35ebdd9d41d6df07d86132d66a89e501ca6e28e79a5752316f4dc47d45d8fa3
-
SHA512
8afec31599a140a588408e4d4b8849a437d8c9e6a23425a50132419403e30e59daebe18918c0694778ca63e28a890711bbf0f23399553e2eb5f38ef4b47a1f5c
-
SSDEEP
12288:Quye8ItA1cZvpWCxEeHKGg0NxHwdvVJJ35sBBVoKwEmNSguv9QLnPLzYMANynnTB:Quye8qZQyEYDjwdZOBBOKwZXI9uvnq6
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 192c78ed5d0a90fac2cd12182d75f7a7_JaffaCakes118
Files
-
192c78ed5d0a90fac2cd12182d75f7a7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE