Behavioral task
behavioral1
Sample
03adfa645b6aff2b92cc203b6d74f703_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
03adfa645b6aff2b92cc203b6d74f703_JaffaCakes118
-
Size
7.5MB
-
MD5
03adfa645b6aff2b92cc203b6d74f703
-
SHA1
b16bf0ef01034462140d32b20197b9ebf345b845
-
SHA256
4969372145eeee864076b00807959786edc9d9b86576abb4f71b79ae4476f4c6
-
SHA512
ede1391abece664e83729e433d76c9992e775749d4b30566489337393c6be4036d304801a73a508f289f93a42677ab9c35eb224d5a18ec6416e6b1886cc86aab
-
SSDEEP
98304:7CMjARf7M2bl01hxSZYNNdNg6SUjwliMYg3ywZLHR:xjARf7Vx0c6ijiwag3ymHR
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 03adfa645b6aff2b92cc203b6d74f703_JaffaCakes118
Files
-
03adfa645b6aff2b92cc203b6d74f703_JaffaCakes118.exe windows:4 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 8.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4.3MB - Virtual size: 4.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE