Behavioral task
behavioral1
Sample
853db801b7c605f37bb6b081ecc77c00_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
853db801b7c605f37bb6b081ecc77c00_JaffaCakes118
-
Size
600KB
-
MD5
853db801b7c605f37bb6b081ecc77c00
-
SHA1
88617c5d28d9a946e37940c296f915969f43bc4f
-
SHA256
d169a29738b8fe6a8ed42968a228b514049a7ad5c9dbd41143f135d949de5adf
-
SHA512
b913ca56df0da7642a992b4d30d9bcb6401a753e092f3b75d312cb9db6c6abe0d3b364993afec3ecd32efa6164aba56f334f08e09aebb2031a1e9b458c0af57a
-
SSDEEP
6144:dkJJb0hMJiy1dwc3YV/5n/Dh3YSTxShxCEbBoYRDPB1Q/d981F97V3D4IvcAPGmO:OShwwc0/htHaDP2da1Snu9lw
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 853db801b7c605f37bb6b081ecc77c00_JaffaCakes118
Files
-
853db801b7c605f37bb6b081ecc77c00_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 364KB - Virtual size: 364KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 224KB - Virtual size: 228KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE