Behavioral task
behavioral1
Sample
95f0db40faed6fb046402e7a349a624c_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
95f0db40faed6fb046402e7a349a624c_JaffaCakes118
-
Size
34KB
-
MD5
95f0db40faed6fb046402e7a349a624c
-
SHA1
009b1059232e79da52b0e1566744765facf53f47
-
SHA256
0566b301524d3736307dce9302751f493cb0e4257170fe3233f16c49a3740722
-
SHA512
8a756b37123ecf22abd1bf88782925b47bac09e5d01a6219f78b0375111da9d65edb9b9e226df883b09fcb2e23c57b31c4273ba21debdb14cb3dccb3f6e7b32e
-
SSDEEP
768:ZsGxAmsH36WOkoB4P7+0rcyS3jte/7WbHc9G:ZsUAmsKWjoB4j+uSg7S
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 95f0db40faed6fb046402e7a349a624c_JaffaCakes118
Files
-
95f0db40faed6fb046402e7a349a624c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 140KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE