Behavioral task
behavioral1
Sample
955e04523aae51d3e10e465bd209b87e_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
955e04523aae51d3e10e465bd209b87e_JaffaCakes118
-
Size
56KB
-
MD5
955e04523aae51d3e10e465bd209b87e
-
SHA1
bf92bf6cdebdf3f7a2f0d3aff512c03a59e4720e
-
SHA256
35e3a169cd61e291be55db9b7253228d2348ef10063fc034c5399b7654d666ab
-
SHA512
5e0a1b3d6530adac75f5e09b1c24a0a2499d72ce875cf4c59a3e4cd1c8c36c319f10896ab8a01a3b85e34a5d61c4c6b123893ae130adf6638c3b274e3e911645
-
SSDEEP
1536:bH+rYTy79L0APtF5gQaB6g3deok0hP1HDlcPH8woeNBjgpmPUxeNR2qJ0I:berYCpFFGjFdeylcPcFg9gw8xC6I
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 955e04523aae51d3e10e465bd209b87e_JaffaCakes118
Files
-
955e04523aae51d3e10e465bd209b87e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 168KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 55KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE