Behavioral task
behavioral1
Sample
896d2592887cac8fbfc989e539e4d432_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
896d2592887cac8fbfc989e539e4d432_JaffaCakes118
-
Size
784KB
-
MD5
896d2592887cac8fbfc989e539e4d432
-
SHA1
0d0422a4123b2e2e42ff8d1e51ce420e992e2543
-
SHA256
912ae8977c15f9b1cc98793af9482500bded3df119e694fa4a12748cdcc79f9c
-
SHA512
e828a2ca0665f546b82bc5a7f2ee4784b22257cf125681ad6eacd634b3d7447ab5bb1bc81441cf1b10ed15ade4a6a8e2382e4a22af1c487780c63d47bf929be1
-
SSDEEP
12288:+u0balJOUnmqePetVCERVpB+q7kbR964sNkpQPMl2/awVAFC7AdW3OA4j7IxE:DDDnFmE50qyR964smQPUbpFC7jy
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 896d2592887cac8fbfc989e539e4d432_JaffaCakes118
Files
-
896d2592887cac8fbfc989e539e4d432_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE