Behavioral task
behavioral1
Sample
1589a5efc3ce2827b99192b4c8ad57c2_JaffaCakes118.exe
Resource
win7-20240508-en
General
-
Target
1589a5efc3ce2827b99192b4c8ad57c2_JaffaCakes118
-
Size
784KB
-
MD5
1589a5efc3ce2827b99192b4c8ad57c2
-
SHA1
0d491109ed7cdeba43e2cc94771f5fa1289f70e5
-
SHA256
ef461220147bb6a7fffbb5dd1b294c274f6c6880953fef89a3db8e3d0d8ce868
-
SHA512
0590e846ad3afe32675c9f6d56bd0cf88f2ac5658101dde538a91d8d8c20b5314d2c249f63a2bdba2e5e9f095776564438942083bbe446ba1fcb3a7902b9165a
-
SSDEEP
12288:rIF09ZGn+QaIxz9VAlGeWAnNpsupVKEYgpEq2X3gGJ2kGOEJTDdnIygHUMffA:MUZJiDTg5sEYKmgqdGOEJTR+f
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1589a5efc3ce2827b99192b4c8ad57c2_JaffaCakes118
Files
-
1589a5efc3ce2827b99192b4c8ad57c2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE