Behavioral task
behavioral1
Sample
ce34935753927faa32ad852960d7a8e2_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
ce34935753927faa32ad852960d7a8e2_JaffaCakes118
-
Size
218KB
-
MD5
ce34935753927faa32ad852960d7a8e2
-
SHA1
a23d99e33c1f76e83d4f10dc7d7c4475377d01a5
-
SHA256
275aa6542a9620792e6a1cd47411aa866e5a1a0f05261487336d77a70e5c5c56
-
SHA512
559f287249287a2e86af45e8ef062183e3c9d9692e5623cdf12c7a500ca9c0be211b6df8ecb0114d6ffd3db31ee15ecf7c189c688cb400f1a656e40fbd5e7e6e
-
SSDEEP
6144:U+lE6/kf5jKNwPq1ELOSvAIXxtqahibCPv8N7R/oSC:a68Rri2y/KxtAmcN79oSC
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ce34935753927faa32ad852960d7a8e2_JaffaCakes118
Files
-
ce34935753927faa32ad852960d7a8e2_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 420KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 214KB - Virtual size: 216KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE