Behavioral task
behavioral1
Sample
ce4e17164a4e8898c5ae1cffae841c4b_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
ce4e17164a4e8898c5ae1cffae841c4b_JaffaCakes118
-
Size
25KB
-
MD5
ce4e17164a4e8898c5ae1cffae841c4b
-
SHA1
3d0e1033e5a917a0e5898218a5b546c0c21fe7c5
-
SHA256
0716efb758da9e7f6bacd642ff55df11640498ddc8d895d8ceaf4e6fe3f675d0
-
SHA512
6cc8c7c8f6712cd162ad4c5b6fe2e655f6525b9c95f7dc8c468067bc0f60a20f10c374702425d2dac7367cecc8ce7c9b79bdbb1e300f5ed7a916f6eb6f924008
-
SSDEEP
768:GN+5IotW7YXtMf5YN24x+hXa2Rk0aWypdidqdxtj:GNEIqW73/i+hKupQpdidqdxt
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ce4e17164a4e8898c5ae1cffae841c4b_JaffaCakes118
Files
-
ce4e17164a4e8898c5ae1cffae841c4b_JaffaCakes118.exe windows:4 windows x86 arch:x86
330ae68fd35ae99521a0ac6a1fd9b999
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileA
Sections
UPX0 Size: - Virtual size: 212KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
UPX2 Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ