Behavioral task
behavioral1
Sample
ceec9138f6f82a543a5773f58108d240_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
ceec9138f6f82a543a5773f58108d240_JaffaCakes118
-
Size
266KB
-
MD5
ceec9138f6f82a543a5773f58108d240
-
SHA1
2bd979a272f145b388c7281144fc1635a36058b7
-
SHA256
180ddeced9a76cf6b7fefc348cfc5c93d10e03135943f9ca573fd4f9be6b083e
-
SHA512
0c55085419a282e18efa11320875f7ebc73ade9d4d03cc9d8041f91128b3ee5b9dd2fef06cb820e3d2e2e40047b40350d5ce83efbb6a1b9341572ee87cf4649e
-
SSDEEP
6144:erTUGXDncBO9CRvpnWA2Q4qLpBZFQNmmN7Am16boS2Q6N7D46sNwC8bo:yzcmEnv2QHTZFajhAmcoS2Q6t46NCR
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ceec9138f6f82a543a5773f58108d240_JaffaCakes118
Files
-
ceec9138f6f82a543a5773f58108d240_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 320KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 191KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 73KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE