Behavioral task
behavioral1
Sample
84cbd3fc8c0df26a407648c4c4d6ae28_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
84cbd3fc8c0df26a407648c4c4d6ae28_JaffaCakes118
-
Size
365KB
-
MD5
84cbd3fc8c0df26a407648c4c4d6ae28
-
SHA1
3537a4621794e6e4fe5defcd8ba2d31e13d4c5d9
-
SHA256
8106422931f9a3024678cb144fc9a786a5310214a23c0e710a998ec3c25c2266
-
SHA512
f6f1d0a922ef02f9e0c3bb0874caaeb0273c6cd4c1bfba1e8bb4baa88dfe28c47fbcadd3024891453f0edf594066d94af2da3d9e32ad4e1f48020a28abf9b01c
-
SSDEEP
3072:aN8SSJHk07f0ce3SooX2oIha0hMPoZtohIaNSijRLB9qug0mUkwihuwstfdvjlR:D1JHk663S2BZ+ZfhLquLEj1stl
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 84cbd3fc8c0df26a407648c4c4d6ae28_JaffaCakes118
Files
-
84cbd3fc8c0df26a407648c4c4d6ae28_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 184KB - Virtual size: 184KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 99KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 80KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE