Behavioral task
behavioral1
Sample
952cd00e45d9a2f72a30c3566a6dc3f5_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
952cd00e45d9a2f72a30c3566a6dc3f5_JaffaCakes118
-
Size
29KB
-
MD5
952cd00e45d9a2f72a30c3566a6dc3f5
-
SHA1
035170c16ffc576b4ba7cde86661a2de87b7c534
-
SHA256
f80c004cca5f9addf3245a74b0c789c49faf6cb207da9d1c4e7889a86f09bcd3
-
SHA512
caee6bebb3f1dc574f9fe4933071897b8cdcdb83829edd1422c2e18d10aa0919b5bd419362fe62f3b4f880ce8326c28111ddd74a4044c15b77fd80d43bf710ec
-
SSDEEP
768:HatiZ0EHl5YD0YUCFIH5++yz6xayxYY7MNQnHcf:HnZ0EH0Dgh1hYyMN68f
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 952cd00e45d9a2f72a30c3566a6dc3f5_JaffaCakes118
Files
-
952cd00e45d9a2f72a30c3566a6dc3f5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE