Behavioral task
behavioral1
Sample
85674b42d560d2464bda78e45410cf1d_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
85674b42d560d2464bda78e45410cf1d_JaffaCakes118
-
Size
82KB
-
MD5
85674b42d560d2464bda78e45410cf1d
-
SHA1
19d31d45d9ae3ae41fcc9d943fe7dba6253f3b0d
-
SHA256
4a0f6baa9744933c48bd348da8c5ceac28020be9be347332ef8d6c7483afeb22
-
SHA512
6cb32ee3a079e3abb1ef7e4f32cf689f45f5863062d648a025110f803017529da319ce84026a360d2d177fa644d6dd39d434b05bfbff730f299a8bd8a5f215fa
-
SSDEEP
1536:g1A+tVxx1sd9Uv8xXcBKUpUq6Fk05q484z4t8Ei4WGA0z:Q//xg9e8xXcBKzqak05b84zw8Ei4WJ0z
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 85674b42d560d2464bda78e45410cf1d_JaffaCakes118
Files
-
85674b42d560d2464bda78e45410cf1d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE