Behavioral task
behavioral1
Sample
962c432aef504a6090eb373b80f14927_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
962c432aef504a6090eb373b80f14927_JaffaCakes118
-
Size
27KB
-
MD5
962c432aef504a6090eb373b80f14927
-
SHA1
94752c63a423d2d3d198f285195a9f9756f13084
-
SHA256
5b480a0b86c195d6870d55373ad0fec8f7b27629efb5c50150c2cab40ae2fedb
-
SHA512
56fb27f1c35a5723014053941e65b1a8196e17eb8e14ee8e330af8c8b3aa7b0aef8c1bce63ba3f99c011c7eccd0d14d62644b33fdf7ef4ea97af362b9d59a97e
-
SSDEEP
192:/T2yENrlQt/DDOth5N4C3NP+OLdvuOVeJ0E6Da4:/T2yPt/DDmh5NZ5+ItuKDa4
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 962c432aef504a6090eb373b80f14927_JaffaCakes118
Files
-
962c432aef504a6090eb373b80f14927_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE