Behavioral task
behavioral1
Sample
ff74f29bca6e0e955f42212807e4d76c_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
ff74f29bca6e0e955f42212807e4d76c_JaffaCakes118
-
Size
168KB
-
MD5
ff74f29bca6e0e955f42212807e4d76c
-
SHA1
47c635d8c8e606c7f919831e305aa84e61ce04db
-
SHA256
5a2833275f03dda2a2993e15c9fda1471b2ccb9937b68cf685fe6e1dee32eb7f
-
SHA512
5705d9905c5d982ab1990f303db42e024025ddec8d81ffa3a1c10ac25b0de4d56e20a423c2cbc20d2ce4081fdca50d54f3476061b2b06af639910a319b67f92a
-
SSDEEP
192:zliF3p1k5atEJ18WeQbCbsVc5VAXpKTsxS0:8dp1kYm1FCbpqpTb
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ff74f29bca6e0e955f42212807e4d76c_JaffaCakes118
Files
-
ff74f29bca6e0e955f42212807e4d76c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 166KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE