Behavioral task
behavioral1
Sample
14665d6d4a6804384514396cb8ab6a47_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
14665d6d4a6804384514396cb8ab6a47_JaffaCakes118
-
Size
18KB
-
MD5
14665d6d4a6804384514396cb8ab6a47
-
SHA1
ff802ba2115b2746e779ae9521141c886c6b3e70
-
SHA256
61e92874f9d34e4d675965580a8f9eb0053c3967897b56e7ad4e1031a2bbacb1
-
SHA512
54e2cad8d15fe6be9681b2b8c272619ace3cc395eb0a0a7fee0ab70cb3e73dd335e96a732c31ccf103a5c1c8739159c41fb3a93b307f2259ff6e0b06e630a69e
-
SSDEEP
384:96VxfU+8nJF7sxEbFMLcUlSu/8l4lYqG4OVVBRtobmn9j:9V+8nEvQHq/mV
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 14665d6d4a6804384514396cb8ab6a47_JaffaCakes118
Files
-
14665d6d4a6804384514396cb8ab6a47_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 88KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE