Behavioral task
behavioral1
Sample
95b09ba93b4cad7e2b224d3da955421f_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
95b09ba93b4cad7e2b224d3da955421f_JaffaCakes118
-
Size
89KB
-
MD5
95b09ba93b4cad7e2b224d3da955421f
-
SHA1
97ce7a1b30deedbf3e8417ae36e1ee6c92be3229
-
SHA256
9cc78a427a7cec9d2bb942d61588b5f31267da472fc00fd57f5f111ddeb03ff6
-
SHA512
92e09155e33d0572df244aaeb4670438750d762164c3abecedde411d5a530462ef17cc04bfd50595633f315447ed6f18ce54f5ddd9f952e8790ce204fa1e6be0
-
SSDEEP
1536:DSiGhI7eSXXLvLp0u7yfeJz+ZrEs+BfiMxqX46U7zeFyBngh2aDULJ:DFG2XXLTp0u/w0fXxqX46UGFyFgrUJ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 95b09ba93b4cad7e2b224d3da955421f_JaffaCakes118
Files
-
95b09ba93b4cad7e2b224d3da955421f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 236KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 57KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE