Behavioral task
behavioral1
Sample
94a27a906cff41bdfd501c42d81361f2_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
94a27a906cff41bdfd501c42d81361f2_JaffaCakes118
-
Size
255KB
-
MD5
94a27a906cff41bdfd501c42d81361f2
-
SHA1
51b33468c2314c4694ddec966a4d72dd42dce897
-
SHA256
5da06be8633f0fa1ee2eaa0e17e4348a95fcbf7690cb715c4822e245e6510450
-
SHA512
8fa34c203aa529559b024a77533f3645fb7208fa79a9dacb5469df50a5befe3d90aa4d70356ae43f73b7ff437c579825141a8303ced604cf54d5ea197cc29b2a
-
SSDEEP
6144:YSz+LLH5wSt9QlK3czQbhWTFFxnJvEAITJjXtzKnD/6ht9w:xUp3QUEfxnFEAIXtzCD/qXw
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 94a27a906cff41bdfd501c42d81361f2_JaffaCakes118
Files
-
94a27a906cff41bdfd501c42d81361f2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 472KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 252KB - Virtual size: 252KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE