Behavioral task
behavioral1
Sample
84268965e9c5988edc9233a67f077f31_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
84268965e9c5988edc9233a67f077f31_JaffaCakes118
-
Size
464KB
-
MD5
84268965e9c5988edc9233a67f077f31
-
SHA1
30039b7f194236212e6164d53f99e741feff1461
-
SHA256
48ad2ef94aa5b3f204dbd3f9987335831dde81360d9766c2a7d60335b9732c23
-
SHA512
9c5f027eb5f3b9cdd18b35c103629de4ee035b19cc2c5344d7872f087c116c82680b4a8bd49ebe448520c4e2c76053fb0aad9daa0c04ea9ddbb0b9adeba86602
-
SSDEEP
6144:ExgVwiJ1gkzKq/XuoBy0TaJTcAPFJJ9z/2oSq+T3AUcOB:ExgVN2afuoy0TuTd6oSqoB
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 84268965e9c5988edc9233a67f077f31_JaffaCakes118
Files
-
84268965e9c5988edc9233a67f077f31_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 516KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 189KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 269KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE