Behavioral task
behavioral1
Sample
ff53b14e82e2345f7aa5135aca243136_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
ff53b14e82e2345f7aa5135aca243136_JaffaCakes118
-
Size
94KB
-
MD5
ff53b14e82e2345f7aa5135aca243136
-
SHA1
66040946f16002de2bf981db08c72ecb47d6060b
-
SHA256
876e252e2a2cf537175ab524d3ffd6400937a04280f5ad041a055d8088b60836
-
SHA512
a97124f2951337d589eb4714e0b99687aa84bbb01d39f7ae7d8ed1f1ea8ea617cbc720aadaf75ad2336cd15eb69737c3f5341ac2153d12b40a9d0aadd614eb55
-
SSDEEP
1536:CQT521Z821ZWaM/uPAEq321ZD21ZG+P+:hl2z82zWaYu4D2zD2zG+P+
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ff53b14e82e2345f7aa5135aca243136_JaffaCakes118
Files
-
ff53b14e82e2345f7aa5135aca243136_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE