Behavioral task
behavioral1
Sample
94642e022ebd2d18ab235df059dfccab_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
94642e022ebd2d18ab235df059dfccab_JaffaCakes118
-
Size
250KB
-
MD5
94642e022ebd2d18ab235df059dfccab
-
SHA1
ebf6d1fce10fcbdb947cb0367c40a005cabd1aad
-
SHA256
8b2a0c2c0162f7f6a01cdc75e40cf47f08f67ca9b76edbb76c386c43b2a28c63
-
SHA512
5e0a5c20bb3cd5341b1572ad839c6b22084102bd67b7e52903a3ede18f62fbc741b235d10606390c2054fff9c32da21a56e87076396d6e59df7557c3886fa130
-
SSDEEP
1536:vq4SAMhrftF0+gYQKlHu4aMpV6nzbaoi2F+btWPhsolye58r2FXOXq6+Il852FDn:vqlAdYQKenP62iYPOmyNitmq/Pk
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 94642e022ebd2d18ab235df059dfccab_JaffaCakes118
Files
-
94642e022ebd2d18ab235df059dfccab_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 184KB - Virtual size: 184KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 63KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ