Behavioral task
behavioral1
Sample
94f7ddd6cb59c92836b6fb877363cb30_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
94f7ddd6cb59c92836b6fb877363cb30_JaffaCakes118
-
Size
122KB
-
MD5
94f7ddd6cb59c92836b6fb877363cb30
-
SHA1
45e7023b020cfa5b68281660c8c665e54e0fe2c1
-
SHA256
32c62f21acca4f47f3ad2a9ab7dc67bca864be7e927be02a02b3e6e5554c0b1d
-
SHA512
a79343abecb9998349ab8faa49517912ece76128509381fea357c6b9c91f05b4982a3b628d7efeba0f7bfa05bba14e19434abb3c310a4cffa9052cede9998d3b
-
SSDEEP
1536:+OC0FvV4OguHxjhpA4Bm7uW0vSUsghQevBFkutIbgTuFqKRr0aF55leGhd9TfBi:+wV4OgSzBmh04eZFkz3Rr0zGj9Tf8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 94f7ddd6cb59c92836b6fb877363cb30_JaffaCakes118
Files
-
94f7ddd6cb59c92836b6fb877363cb30_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 232KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 73KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE