Behavioral task
behavioral1
Sample
16ac548f83baafdc3a86d6dc0d931790_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
16ac548f83baafdc3a86d6dc0d931790_JaffaCakes118
-
Size
115KB
-
MD5
16ac548f83baafdc3a86d6dc0d931790
-
SHA1
337d85ee5679edf698dac99c9168a590d713a5e4
-
SHA256
d7e1b413457f6a4e6e9a3515dac86a04efec136c2951abab7f83112a6cec2fc7
-
SHA512
a52e8bda7e4a76a64425491628aa9fc876c290c60780fb39f5297101f9f307e9bbff084e43bae64b0d212711cb2990c2ba9c49e169100f847afe1b87bba0ad21
-
SSDEEP
1536:yOYP2GCCUKE9MgElh//ensemIEKMxQX1mWieaUMy2C+JDoQbLtPxj4v6TDOajBmG:+YCTE96tEBLMUaHyFQxxI6TC+5gIxvT
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 16ac548f83baafdc3a86d6dc0d931790_JaffaCakes118
Files
-
16ac548f83baafdc3a86d6dc0d931790_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 800KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 109KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE