Behavioral task
behavioral1
Sample
94aef7596dda42a550d193c6e4822f2f_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
94aef7596dda42a550d193c6e4822f2f_JaffaCakes118
-
Size
38KB
-
MD5
94aef7596dda42a550d193c6e4822f2f
-
SHA1
f7208f29c8e6e8baa5bd96e35fbc19ec607f10fa
-
SHA256
2edf8185a5cf8f9010e01ccd5d091f34bb67c9f53f6291fbb66c5f331303ae0e
-
SHA512
6e6497da99cdc505c55bb19157933330514de277424c76e66820b779dc6676eefdb2d02b7dc965fb3a0616642e32ee7390fecd67a555faec18b71f335db82cf1
-
SSDEEP
384:/TlWZgXJNEWx+GoN870DRBog9WMXjdTqoaVZGXYP+2VKEk:/5WZc0BR9WMzdnoP+PE
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 94aef7596dda42a550d193c6e4822f2f_JaffaCakes118
Files
-
94aef7596dda42a550d193c6e4822f2f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE