Behavioral task
behavioral1
Sample
14c73d4851dd411c9371ccf54e16b5b3_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
14c73d4851dd411c9371ccf54e16b5b3_JaffaCakes118
-
Size
1.3MB
-
MD5
14c73d4851dd411c9371ccf54e16b5b3
-
SHA1
bc73bf555465376522afccc9d2279e82b64d7d0f
-
SHA256
ef0cee1130191f4db0b651560fe546feb0ba1ef89524ec19f7ff8a6ef89a440c
-
SHA512
888f1c1971c0e7df9679d54868d7b8323e82dc7fdb9debea653bb978fb145411ef44f5a13020ef20e4008e3dc888b9e739b9e40f23549bd1e335d26f2059e05c
-
SSDEEP
24576:+INIGws1MMryrO+pSW+QpRhXdhkHq+LoqdM/wQUsJafPfVvG:+IqGws1MMoO+MW+QpkHq+oS5f
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 14c73d4851dd411c9371ccf54e16b5b3_JaffaCakes118
Files
-
14c73d4851dd411c9371ccf54e16b5b3_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE