Behavioral task
behavioral1
Sample
94ea259f8122dbf02c5cee76bddf372a_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
94ea259f8122dbf02c5cee76bddf372a_JaffaCakes118
-
Size
197KB
-
MD5
94ea259f8122dbf02c5cee76bddf372a
-
SHA1
d7c831a090dcfc7f5ee1a2fc980a18c11bddd8bb
-
SHA256
ca778c0c6c180f7555adea2fab78626304a0835cb1f0b0c939fdc2f9e1bbae42
-
SHA512
de7a152cd303a3cacebdb147cd8808fd09d1908d114dd5d6d77038af89cb416ca67b72597987a942c5d90866e0eb4ce6468961b3e2b5e790868d4aff9f07a0fb
-
SSDEEP
6144:zVZH7SFuVy6JmeKoZ12b+e72OLnDmwPsXpoSq:zr7SFuE6FKoL2aHKDE5oSq
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 94ea259f8122dbf02c5cee76bddf372a_JaffaCakes118
Files
-
94ea259f8122dbf02c5cee76bddf372a_JaffaCakes118.exe windows:8 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 140KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 193KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE