Behavioral task
behavioral1
Sample
144042b826520ed87f9e66ca9a83768f_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
144042b826520ed87f9e66ca9a83768f_JaffaCakes118
-
Size
17KB
-
MD5
144042b826520ed87f9e66ca9a83768f
-
SHA1
e1d0a9ebd2b583aa57edfdd431c48374634a8381
-
SHA256
9e0a9918deb4d2052af91f1ef3ff7bbf6ad44ce05ced55d9ca475ab4fcb84d47
-
SHA512
d75927a365e98b05dc1ce51572d4a5eb9ed86751ec30c5e667b09eadb7e188ae960dfe9e76ae5436d2821e52304f6874b31ab0ef9cb3927b770f33de949b415f
-
SSDEEP
192:nQx8jh13mwO8qU/LDZJpuuU8hsTJ6jPyztWz8lpZ2vlr8l+Sykth3et24Yvm1PHZ:nLDTs8hsF6qtK8lzQ8+Sych3mYvCPHxP
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 144042b826520ed87f9e66ca9a83768f_JaffaCakes118
Files
-
144042b826520ed87f9e66ca9a83768f_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 52KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX3 Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ