Behavioral task
behavioral1
Sample
95b194f2e750b1756d11d43afbdeffba_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
95b194f2e750b1756d11d43afbdeffba_JaffaCakes118
-
Size
503KB
-
MD5
95b194f2e750b1756d11d43afbdeffba
-
SHA1
7befb6bf0b0b332106573483ddeba3428a7d78ec
-
SHA256
c520cca0ed7a869c0c031abc93f2b28b5ce3a7e42a2d35a864f76b06f6ab1194
-
SHA512
7cd9ca4c2e773976a660b2a5d5ce25da938dfc499eb321dabc0a8e5ea5cd2eb843443f16bf8f4c73266bee1030ea45104d455a4bb85aa242e58053f6f8bf469b
-
SSDEEP
12288:X31KMFvsj6B6X0TlOXPdKE5xrtE3JfUSOSdY:XEM1Y680hgPd15xr6
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 95b194f2e750b1756d11d43afbdeffba_JaffaCakes118
Files
-
95b194f2e750b1756d11d43afbdeffba_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 264KB - Virtual size: 264KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 184KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 53KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE