Behavioral task
behavioral1
Sample
94ab69879d827460ef5749fe4813fe03_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
94ab69879d827460ef5749fe4813fe03_JaffaCakes118
-
Size
75KB
-
MD5
94ab69879d827460ef5749fe4813fe03
-
SHA1
a9defe43994be43f2c065ab103f3c516cd45004c
-
SHA256
173cf81c79c999a1231ed9951152d669259a0c77a4b1140981399b2a00f48c11
-
SHA512
40735fcf18c41d882acb98fbb4c8ab73c8ec194ec9b4b9fa099d72902bd0922443dcc94bd797b822f8f0ef859292d121e2695df0af6e78cd9dc31b1f13baa1c4
-
SSDEEP
768:nuYuK/PUbn1f4oCUwL9B3+YCcYkJHZXYMThYMMkWmxaklmf7V4Uh3RYEl8:nuYzcbn94L5RjY+lZThZMZsanhZRYEW
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 94ab69879d827460ef5749fe4813fe03_JaffaCakes118
Files
-
94ab69879d827460ef5749fe4813fe03_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE