Behavioral task
behavioral1
Sample
c86925646ddfcd8a8e77080795995db2_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
c86925646ddfcd8a8e77080795995db2_JaffaCakes118
-
Size
264KB
-
MD5
c86925646ddfcd8a8e77080795995db2
-
SHA1
9990584f650a5494d2939b8de4e5efec95f734d1
-
SHA256
ca0e910369904cf86b55e5c01a881aabb84759f7bb983826ee3ba3467ffdb75d
-
SHA512
e00337f274c72c09d73e44a34c3664e7c2fafc2035d85cd76b05fcaaa08e5280c92b0608c64e8fe6fe314e66247d8967dfa6ca11b08ed5d40ba37197300df91b
-
SSDEEP
6144:qQT0eennLOxlSJe1SSwMhTvoSNCpQW8oYsEla:lYeeLOxD1vXRoSLoYsE
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c86925646ddfcd8a8e77080795995db2_JaffaCakes118
Files
-
c86925646ddfcd8a8e77080795995db2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 160KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 102KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE