Behavioral task
behavioral1
Sample
c117e92f703ac7bb8a3efcd94289bd40_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
c117e92f703ac7bb8a3efcd94289bd40_JaffaCakes118
-
Size
656KB
-
MD5
c117e92f703ac7bb8a3efcd94289bd40
-
SHA1
569fbc13d5736ac0dea6fd4120f23c7385d5a19b
-
SHA256
966527d5197be19250754a1fc83be632dee5ce15b8822253425552b8ff1309b3
-
SHA512
7b42a553c2a379a30bd62e5914c97e5f2279d21590f1dabfb5050d8e1bb58c3f4f3200da4a49e2e07b8d28401bc39552c3c2fbeb9cfcaaa4cdf17021d46425e9
-
SSDEEP
12288:bZWRSCArmw7uzhKUEE4vPq6IhcDoyiGDj5bWZ:QwC+7uz4UyGhSvNq
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c117e92f703ac7bb8a3efcd94289bd40_JaffaCakes118
Files
-
c117e92f703ac7bb8a3efcd94289bd40_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 428KB - Virtual size: 428KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 220KB - Virtual size: 220KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE