Behavioral task
behavioral1
Sample
14eb61e50e19e623afa02b9c26544ee9_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
14eb61e50e19e623afa02b9c26544ee9_JaffaCakes118
-
Size
1.1MB
-
MD5
14eb61e50e19e623afa02b9c26544ee9
-
SHA1
4aa6f31b5fde2e756ced66d48585149637b8fb00
-
SHA256
c0a24176cff79e970a131618e213a5ca552c203b0cd2eee7aa359342414fa34e
-
SHA512
06a588b169d7b777d94fac41fa3b1eeff303f8ef882b93a214535e62334f4a144576ace10e1eb7397d6fde65fa2e8ce25a68a5f10f7740e8938dfd918470f0ff
-
SSDEEP
12288:qydLwQ9UFJWP2xFLa2CvObZSybysSQ20NciytjZkNQOrhPgx+zL+53U/XS34QKjj:IFJJxNalA5csuNcQ8Yr53U/XQ4/Sdw
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 14eb61e50e19e623afa02b9c26544ee9_JaffaCakes118
Files
-
14eb61e50e19e623afa02b9c26544ee9_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 884KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE