Behavioral task
behavioral1
Sample
845d84aa207f28b0cbe32e2daf4302b9_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
845d84aa207f28b0cbe32e2daf4302b9_JaffaCakes118
-
Size
396KB
-
MD5
845d84aa207f28b0cbe32e2daf4302b9
-
SHA1
543e4adef518bc7d9a11d7ec77ba9ca6d980af8d
-
SHA256
caceedfafe97c9d534e650dcb6a5b41098b17e5207c83f41ce0477408f561b5d
-
SHA512
7319711406cc899bc41c3ee0fde2dfbfcb1e96a137646fe4b453ae4f590ac854c9de9bddc79c4c0923188cbbbb89af153d34a33a54b52a24afc33e80068d469d
-
SSDEEP
12288:OeR8+TBNyNsfc8n/D8ONi/EZwONEfMzjQroSLMMUJ:Oe2+3yN+cmrH6E+cEfMzjGMMUJ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 845d84aa207f28b0cbe32e2daf4302b9_JaffaCakes118
Files
-
845d84aa207f28b0cbe32e2daf4302b9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 596KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 363KB - Virtual size: 364KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE