Behavioral task
behavioral1
Sample
f58c39685360b2c9265692f10c657d10_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
f58c39685360b2c9265692f10c657d10_JaffaCakes118
-
Size
46KB
-
MD5
f58c39685360b2c9265692f10c657d10
-
SHA1
3a520cd4796c8734a767ba1236edac0e4306ca4d
-
SHA256
b0526fb5095c31763808347fe65bda24f616086751d3e661900364dea3ad25d3
-
SHA512
8412c7a6cf7cceb495948bdbd563d39df2e1d75aa62ffee96934c375b0b8de133e714689e5a4f9058ac6c2a19ba7c43f6362b05e9a069fc5a40a591bd8adf7eb
-
SSDEEP
768:q0Iv8Vy434CpGpVUzrSNezomcf9AD2lYnnnt4zjfU:mzwp0Czrf4f9AAxjfU
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f58c39685360b2c9265692f10c657d10_JaffaCakes118
Files
-
f58c39685360b2c9265692f10c657d10_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 33KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE