Behavioral task
behavioral1
Sample
f00e685851c4a357c93d4129bff9d359_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
f00e685851c4a357c93d4129bff9d359_JaffaCakes118
-
Size
241KB
-
MD5
f00e685851c4a357c93d4129bff9d359
-
SHA1
e928c139a41270cbc7a9a24043cdd61019885544
-
SHA256
85c3e1e5ffb7b8427bbe4dcd4a249992f948814ba9b592022a5c16f9d1515744
-
SHA512
d8abb1dfda0248e4035b2bdfe285d76c8a8701c26d99bf5c71b6911c1599fec3627cea2d13b6095321c10b82160415b4e1f919d964283bcaae695219fcb57985
-
SSDEEP
6144:519euRJsJopbxPjWoT+q/U6KA8x3btgvi:5eR89r/IAiua
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f00e685851c4a357c93d4129bff9d359_JaffaCakes118
Files
-
f00e685851c4a357c93d4129bff9d359_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 166KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE