Behavioral task
behavioral1
Sample
94d4c5ef1d0b029e1126c200ddc5ddbe_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
94d4c5ef1d0b029e1126c200ddc5ddbe_JaffaCakes118
-
Size
171KB
-
MD5
94d4c5ef1d0b029e1126c200ddc5ddbe
-
SHA1
fe582a6f9353b9b79dd779a25a2e36d0c8e1f401
-
SHA256
a7212645a5297e02746cf39815bbc922294ed3ec172b6fead0dc2dc2652e127a
-
SHA512
b26205b76c061f02551f6a9c8612966a6d24f59599de71255ad9c7907972f588cc6bae4e2cd3d9999b9e51a85ef20f2a91816e0367fdd28ca677b734306e227d
-
SSDEEP
3072:ku45GsDsjRBxVQPBNMqr7N9yh3ks4bYQUzatVFpkl5XwuR99D1svDXuhtdBqAaVw:klUQLjSh3lMBpGR9VIXutAAaDvoSo
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 94d4c5ef1d0b029e1126c200ddc5ddbe_JaffaCakes118
Files
-
94d4c5ef1d0b029e1126c200ddc5ddbe_JaffaCakes118.exe windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 96KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 167KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE