Behavioral task
behavioral1
Sample
14bdd0ef196d75e67181e36d455596dd_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
14bdd0ef196d75e67181e36d455596dd_JaffaCakes118
-
Size
148KB
-
MD5
14bdd0ef196d75e67181e36d455596dd
-
SHA1
b37334c2cf3cbdfb8a8b67bd0e58e56bc2f04b60
-
SHA256
a6880469b12c2c392eb6ba0fc488698a15f12ec1067e5a647f0189feca26b393
-
SHA512
ede73f2419df562c05a29a8f47ff80a0c4cbe8e84d5f3071a04b8e30b95342cfad51c6e0b54f6b9e0258cf2a3c1ca127ef2845cc148d889f7b71cad75f529bee
-
SSDEEP
3072:77cWbYGoutjCxGI2tmE/nuyPY7B99QCOns3m+8lfe0kX:7FcGoSmMIkmxBUyxWzG
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 14bdd0ef196d75e67181e36d455596dd_JaffaCakes118
Files
-
14bdd0ef196d75e67181e36d455596dd_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 172KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 126KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE