Behavioral task
behavioral1
Sample
944890a1e19f6dfb00571d05ef732d05_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
944890a1e19f6dfb00571d05ef732d05_JaffaCakes118
-
Size
784KB
-
MD5
944890a1e19f6dfb00571d05ef732d05
-
SHA1
df8c6d0947edfd0d90c3412b753585d82105a33e
-
SHA256
995c5c91328cbc87911ee5d133d71580c687a8cdaed3b563f7ef8f95f931785e
-
SHA512
9bb0177b71e34b8599cb59630a13d52baa55ddd432f872ca7a8ebf80531131bd9a83bba3b881951fed595e17d74bed455c5c1d47eec841ab099ccfefad66d51c
-
SSDEEP
12288:dL0bnmr+CD/VK8XcCX+ItAgdhw9qgG7q9YargwyjO60a31S7dnrsVMjgGhcKyN6+:k6zMCX++AkkdoWUwLra3w7lgVMjhQ1
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 944890a1e19f6dfb00571d05ef732d05_JaffaCakes118
Files
-
944890a1e19f6dfb00571d05ef732d05_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE