Behavioral task
behavioral1
Sample
94d48f2c2b4d298b3dfbb64409da077b_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
94d48f2c2b4d298b3dfbb64409da077b_JaffaCakes118
-
Size
180KB
-
MD5
94d48f2c2b4d298b3dfbb64409da077b
-
SHA1
7898f639ddbd70c712e5a5b442b0346a53422f4f
-
SHA256
7de78505da593049e8bc1a41e44e9c6b8dad0daf5f66967943054783cb00d006
-
SHA512
090daa309f7d7ba4548a9c9208e865de2e6ff9abc638b3e106d11c6e65ac15599c9c3d356aa788f254a06adc53f801a206a909a47a360905d847bc994d80b3a8
-
SSDEEP
3072:eUQevADClxmlU+oFc9uHVZWvtLoB+ObIIW8HtXzlYHyQYzZDWA7EWzMXlTE3xU9d:eU7IDy8qXxv9HFB48VVc62u2B620EnB
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 94d48f2c2b4d298b3dfbb64409da077b_JaffaCakes118
Files
-
94d48f2c2b4d298b3dfbb64409da077b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 74KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE