Behavioral task
behavioral1
Sample
448dcdf27865ac8149d1d70c8b54bf6c_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
448dcdf27865ac8149d1d70c8b54bf6c_JaffaCakes118
-
Size
1.0MB
-
MD5
448dcdf27865ac8149d1d70c8b54bf6c
-
SHA1
2fd195225948ac80ea5876b8c27798e1e0d7a8f5
-
SHA256
5bf393ad6ef9f0e2155e95708f0143c37e4b9342f8e8a17d7dabb46c42e3fdb9
-
SHA512
a3087500a54200b94847e65429f060c36e8c67be20cccca7b083e7273589a6c68d888875ccceb612bdfa4e8e2221b2aa7db714c4a582c635ee70f94ecbd2f05a
-
SSDEEP
3072:NJ7Mct7+2fZEuAgXQ/tRw/GYczLuTdUout:XdUoS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 448dcdf27865ac8149d1d70c8b54bf6c_JaffaCakes118
Files
-
448dcdf27865ac8149d1d70c8b54bf6c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 196KB - Virtual size: 196KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 72KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE