Behavioral task
behavioral1
Sample
c13970370c0c1a9fc4b02814dcdd049f_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
c13970370c0c1a9fc4b02814dcdd049f_JaffaCakes118
-
Size
312KB
-
MD5
c13970370c0c1a9fc4b02814dcdd049f
-
SHA1
5519bac2bff6ad98b957460808f7e9ba40394665
-
SHA256
259aa7e7289e12ba9820e6d0e556b06f15aa089528ac0efc9ee782e47ae2ed2c
-
SHA512
20391700a7860a736b67107181834086b41e5bd45d6b5e68fe25dc86c9df1b6be431fdfb334393d8ea9d66242abc9587771ddb9dd730acac047533f63bd491d9
-
SSDEEP
6144:BvQq5BV8iCkClwnn9tiG9lKnWATDEE7oaMi29w6+hqNstIxAH9aApgtFWA:BvTfCwnnVeTICh2w6SqNsWxa9aIgt
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c13970370c0c1a9fc4b02814dcdd049f_JaffaCakes118
Files
-
c13970370c0c1a9fc4b02814dcdd049f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 576KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 310KB - Virtual size: 312KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE