Behavioral task
behavioral1
Sample
95c190279722828db4abb62089d1c565_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
95c190279722828db4abb62089d1c565_JaffaCakes118
-
Size
784KB
-
MD5
95c190279722828db4abb62089d1c565
-
SHA1
cfbcb7085b49908468c9ee4f125f1d34821a32f6
-
SHA256
046490bb49ae5b7354d4d0b9ce93d59820622d65cb356ec3c7a15ac98a7e9765
-
SHA512
a59a6dd821dcc79261f1d61bee290d8dd5d2972be5f4ec90b926c9e6072ab7a58e2f3309c86ea4ea674c71e3b24cec3b9d43846a156db2780269b11e10893dc7
-
SSDEEP
12288:d1TlaXe3mkUx7Iiv03fJxQpF1bidVH6pMP+u4ZRBN6oMvKrk0sNaJAfVi:d1TlaXe3TUR8fJChwoMPR4CoMvKXyN
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 95c190279722828db4abb62089d1c565_JaffaCakes118
Files
-
95c190279722828db4abb62089d1c565_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE