Behavioral task
behavioral1
Sample
c94edec63a3c932df38e954b961b11f8_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
c94edec63a3c932df38e954b961b11f8_JaffaCakes118
-
Size
192KB
-
MD5
c94edec63a3c932df38e954b961b11f8
-
SHA1
f868c1d8ef4f9bd03857146f900a00262b8cbf9a
-
SHA256
599773f20bdf1fb9e692e82714c36355eadf345907bda66cadfcb8e25a0be902
-
SHA512
234ae37a9650889a80e4815025bca9978e000c984397420bd3cc2f6aa6c842bcd487e74721f3845562e7a2f9952bba9de0a75d32a85983d5cb3eeb494f1d9a0b
-
SSDEEP
3072:f0ENLX2tm4mjyIO+kIHrErlOBUY/PNAh:fMIO+NrsM
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c94edec63a3c932df38e954b961b11f8_JaffaCakes118
Files
-
c94edec63a3c932df38e954b961b11f8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 156KB - Virtual size: 156KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE