Behavioral task
behavioral1
Sample
808a76f3bbe302c19ca37bc820f3b8f0_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
808a76f3bbe302c19ca37bc820f3b8f0_JaffaCakes118
-
Size
6.6MB
-
MD5
808a76f3bbe302c19ca37bc820f3b8f0
-
SHA1
7a43c549363720920b7e80f053bea262d3b8a584
-
SHA256
e90bf6c6311bc88e843f8a6774263e1743fbf2d543382a2d6542ba9401639586
-
SHA512
ff7cdec67496c0135a9dcfd518680297f0c7d3bde640a05d1e5af05a55116d0d2e8a7ed7ff706268223e7a49a68c3b2f79979bc6155d834f900abdd8c039fa57
-
SSDEEP
196608:WpGu/lIOltK5wslSljZ5BArz5LltH04w1XHXrl+9a9z:Vu/lXkwSSld505Lcz1XHXh+Y9z
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 808a76f3bbe302c19ca37bc820f3b8f0_JaffaCakes118
Files
-
808a76f3bbe302c19ca37bc820f3b8f0_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 10.8MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 6.1MB - Virtual size: 6.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 511KB - Virtual size: 512KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE