Behavioral task
behavioral1
Sample
f0d17b4537747caef3dc62658ca15986_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
f0d17b4537747caef3dc62658ca15986_JaffaCakes118
-
Size
243KB
-
MD5
f0d17b4537747caef3dc62658ca15986
-
SHA1
ceb38254c7d738437f5581fe491bf16e4b868a7a
-
SHA256
422e56d7bff0f6122151016c38566608204b2afb99f7080908129c029677a7f3
-
SHA512
5176777c0005f145d02e4a184760730b64fc5ab91a5164217e642344178307db5396a2b44de61e52d2096d68f915f5aa63706d2e44121c5590b0f5ad6f74c394
-
SSDEEP
6144:J7D06HWRoiB/DHBkVW6ss3ye88B33rwf7:ZDXH7w/1kV5ss3ye8Y3M7
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f0d17b4537747caef3dc62658ca15986_JaffaCakes118
Files
-
f0d17b4537747caef3dc62658ca15986_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 164KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE