Behavioral task
behavioral1
Sample
f065c64f1643cc9a7be54a145d9f85af_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
f065c64f1643cc9a7be54a145d9f85af_JaffaCakes118
-
Size
79KB
-
MD5
f065c64f1643cc9a7be54a145d9f85af
-
SHA1
e8899cd1df6f6749bab900f2a679cbe23f81b7f8
-
SHA256
b889a24a3de823f3327f9ff16269e946ae12e431a6ffdcb0c3c414c2d4b3f5d1
-
SHA512
e2ac6411e26b8d8de1605e69d66cae9ded3a49a3d61818a066a97b05ca8111f3a3f19589782d721a23df4cd890d0c62abf5f577065acf01d141f01042fbacc80
-
SSDEEP
1536:R8C0hXQfIRG00JsIsGdiWuTeQ2nfTQ8luDh7rnouy8H8UBaLCv4:50hXQfEW5diWR7fTQ8lWzoutH8UsI4
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f065c64f1643cc9a7be54a145d9f85af_JaffaCakes118
Files
-
f065c64f1643cc9a7be54a145d9f85af_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 92KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 64KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE