Behavioral task
behavioral1
Sample
693cb395cd010f79809de21a6b3b85be_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
693cb395cd010f79809de21a6b3b85be_JaffaCakes118
-
Size
145KB
-
MD5
693cb395cd010f79809de21a6b3b85be
-
SHA1
a7539b2b808cbbb764960752f9c6c4d446f7bbd7
-
SHA256
32a3f3748e70e4d6809f0768b067e339a935cee31c4366b1df6d5e3bc7e86337
-
SHA512
4f03dcabf0b82581392886926c2ea4b127deea5a0bf4024df74b2d7a8e5d4a8bb00e100d4b0a5e575e81f973f7a09f265f4f11692026b05c0f0a71b78aefa158
-
SSDEEP
3072:gE/EOFwTX3iQKHWZFOfh4DgY916V8UZtkWei6pEiWrWMsSGUKzo7o2ou54/r:gEFmTniQSKF0agFVTkTifWMsRbzo7Zoh
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 693cb395cd010f79809de21a6b3b85be_JaffaCakes118
Files
-
693cb395cd010f79809de21a6b3b85be_JaffaCakes118.exe windows:8 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 164KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 142KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE