Behavioral task
behavioral1
Sample
f02ff00617b6d91a82079d32c54fb38b_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
f02ff00617b6d91a82079d32c54fb38b_JaffaCakes118
-
Size
11KB
-
MD5
f02ff00617b6d91a82079d32c54fb38b
-
SHA1
a3b7622e7380a4457b2b3430e90f066268d63bc8
-
SHA256
f947882d7f1cb677885f0adffd79c6168da1a762020c07c40b787e5b2f7f10fe
-
SHA512
1c1c6437bdfaefd45a7dc87ad0f30c411b65c5e28e10c1cd979fb09629755a6f61d7c062efd0fe6d2637825123978f75a933eba24c8c898a6028cc66b582083e
-
SSDEEP
192:fMkj6V3gU7odqbd3z6FXPqEHnc5TqFnd9EJGWTaf4BdFaNJhLkwcud2DH9VwGfc7:0pV3gU7Td3zaXBwWnrERKaaNJawcudoy
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f02ff00617b6d91a82079d32c54fb38b_JaffaCakes118
Files
-
f02ff00617b6d91a82079d32c54fb38b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE