Behavioral task
behavioral1
Sample
96ac63b899e66f5ff07a9c990bd6c465_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
96ac63b899e66f5ff07a9c990bd6c465_JaffaCakes118
-
Size
574KB
-
MD5
96ac63b899e66f5ff07a9c990bd6c465
-
SHA1
cb0a0aa90a3f97695f742d9cd6d5cbbaff06c733
-
SHA256
05ef436198c3ec7cee3fe4d6b49f39954c498514605b565388cd05c1e92000c3
-
SHA512
ce447ce02ba1bceff447978534cf0d963e6701e2dfe7f5deffed43e1a9b7d8755cc845a4243b27e9ccfec2bccebee523018cf1861cd349ba4bf93c4fb3b52e94
-
SSDEEP
3072:0344ESdPcGRwmyTRuRot7flEzOeHPXwN25kUIXfID9oz2+1mkOmDetwy1OsqUCNe:awH
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 96ac63b899e66f5ff07a9c990bd6c465_JaffaCakes118
Files
-
96ac63b899e66f5ff07a9c990bd6c465_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 404KB - Virtual size: 404KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 165KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE