Behavioral task
behavioral1
Sample
940f83101590f76bf1452571f95f0b45_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
940f83101590f76bf1452571f95f0b45_JaffaCakes118
-
Size
199KB
-
MD5
940f83101590f76bf1452571f95f0b45
-
SHA1
d07b6b1f2e6172088a585de96f4d8ff7b5bdb99f
-
SHA256
552d1bc27468f4ae09e87c74485a1227d6ddbeb9242e05787524f310b3162d8d
-
SHA512
eecc0d087951078df96d9ab287d54f190b157d7d3d17dfca464f1ec48ee629047bc5ac3ca21d606959989d5de91c722f93b9cc825f4da132afca617f1fed5407
-
SSDEEP
6144:OrTUGXDncBO9CRvpnWA2Q4qLpBZFQNmmN7Am14loSr:CzcmEnv2QHTZFajhAmWloSr
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 940f83101590f76bf1452571f95f0b45_JaffaCakes118
Files
-
940f83101590f76bf1452571f95f0b45_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 252KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 191KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE