Behavioral task
behavioral1
Sample
c7a95cbd54bc826637aea38dca900a15_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
c7a95cbd54bc826637aea38dca900a15_JaffaCakes118
-
Size
386KB
-
MD5
c7a95cbd54bc826637aea38dca900a15
-
SHA1
cea2506cd877ac0a52ee61c6b948717afd6fd551
-
SHA256
24b0348e346f3139dd3e74f04bd3584066be0a5af2c1408bb8e1124e18645979
-
SHA512
e2ae974eb9e181a3fe6cc52e5c8451d6d6500b9fedbd028f036f6bec562b10e2ae5ae96e190246f8e54c2082b0f3e92c0ed1703f996e19475cc3af7ceaf94294
-
SSDEEP
6144:HEOmKM8/JzJW/tizd5CsqKr+L8l328QjC6LX9EJsMYMZRHRP8Nnpy7icJEYF:HEOmKM8BSyd5tX08p8qx5ZR6yeME
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c7a95cbd54bc826637aea38dca900a15_JaffaCakes118
Files
-
c7a95cbd54bc826637aea38dca900a15_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 196KB - Virtual size: 196KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 177KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE