Behavioral task
behavioral1
Sample
14f1e08233ea091d880858a2acbcd822_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
14f1e08233ea091d880858a2acbcd822_JaffaCakes118
-
Size
21KB
-
MD5
14f1e08233ea091d880858a2acbcd822
-
SHA1
2b9bfa69cfbb8e1272f78936133cdc26168e066c
-
SHA256
61e68a9030533ece8a58f9f30cfc1886edd1a1690e718a59420373c971c4a1f9
-
SHA512
985704d013b3c9fb7ca68da82a7efec15bc9b467106073113f28fbb57bb0f9cb8ea9c8df790b3d66d11353bd98d219a4f6024802f60e54bda54eff2d0b6c7c61
-
SSDEEP
384:P0zGDjRLjo3bIYIkV2Debe3LT1rXq5fnAeSEtE90Tb6zQOSbrBBE:P0zUxoXAw0pDyfnAeS+E90yMH
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 14f1e08233ea091d880858a2acbcd822_JaffaCakes118
Files
-
14f1e08233ea091d880858a2acbcd822_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE