Behavioral task
behavioral1
Sample
21066c00de752ffa1fe224ba7fc5853c_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
21066c00de752ffa1fe224ba7fc5853c_JaffaCakes118
-
Size
760KB
-
MD5
21066c00de752ffa1fe224ba7fc5853c
-
SHA1
05fa88cf992a0a5c3872a5a3814e82de21c398e0
-
SHA256
004c48195399bc6471e98e129bf98e7a6d21560107fcdb2ac58c7644770e4112
-
SHA512
de1d800ce0510817ce5eff866a43eb2439d8309ba5e27e23b45bedd3649685d781e4f34ccb7a5c86bf17698c54d843f7b07cd4d68446ffd5c9bae5cf6e070b1f
-
SSDEEP
12288:h4dMRU/UP4heFjLDFtvoSZiUXZRY49SA7GI/p7a6o2Mhi9Byu8QFIAaWfaydp9pB:qwU/UwhWv1XZpSRSJo2xByuPIA7Pdp9b
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 21066c00de752ffa1fe224ba7fc5853c_JaffaCakes118
Files
-
21066c00de752ffa1fe224ba7fc5853c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 288KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 195KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 37KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE