Behavioral task
behavioral1
Sample
95af97081495b36c5672d453f971fd24_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
95af97081495b36c5672d453f971fd24_JaffaCakes118
-
Size
784KB
-
MD5
95af97081495b36c5672d453f971fd24
-
SHA1
8434652eb4af837515d9a8bcb1c2afafb30e728f
-
SHA256
ab1a9dd2f522b12e307f1c4d0c676b97663d4c31f050ce28f2249572bdafc97f
-
SHA512
327326ab2daeac6261eb0ed38cddfe279ed0c4506e375bc078fc095b615a177e90e77098b9a02bcd385da23d2cebea269bdbd6476111b46bf5d4e8062b7bf72c
-
SSDEEP
12288:j8YVEqoXM/yxQa88taz2udnYPZHFXTyy9wzOMrq8YdpExgUMvq/Gov2Av6n:QdM2Q4u2udYPZHRxwb6zweKdbin
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 95af97081495b36c5672d453f971fd24_JaffaCakes118
Files
-
95af97081495b36c5672d453f971fd24_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE