Behavioral task
behavioral1
Sample
83fde1f120aa0c1d2555bacebaf42d81_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
83fde1f120aa0c1d2555bacebaf42d81_JaffaCakes118
-
Size
168KB
-
MD5
83fde1f120aa0c1d2555bacebaf42d81
-
SHA1
7a4c5f81ab9a14abed25042c31f73deecd80e1a5
-
SHA256
501fbed8c391ff8155af7b8a95c282697004af572fb09c088e7842cc388e7657
-
SHA512
fe0cd16d3c5d5df1ea9bf75572abe203df2cd028d08e30492e14f2fc65fff2be44de7ec28e8187ce69ac86737e47429b93970b378aa9a03588d8741e784ff77c
-
SSDEEP
3072:VwwcwLBQQIIEyFmc8BZniEC+kL62L+1KWqt7tR5OTNL5TE1ZDUI/GWRo2rXfZe:6j44IEyFBInpCV62ayxr5ORdTE1dUI+x
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 83fde1f120aa0c1d2555bacebaf42d81_JaffaCakes118
Files
-
83fde1f120aa0c1d2555bacebaf42d81_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 232KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 159KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE