Behavioral task
behavioral1
Sample
9396ba40b68b9cc7b3c446e50fa7fda0_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
9396ba40b68b9cc7b3c446e50fa7fda0_JaffaCakes118
-
Size
375KB
-
MD5
9396ba40b68b9cc7b3c446e50fa7fda0
-
SHA1
3c2d498de788e6af4d51bd94a85cd8ce1ec07417
-
SHA256
fcabb4454478aed30f975702fbd01ca07d982f7a5cef36c6dea6dc730ea9b164
-
SHA512
3f8af79060149f32354a7fc69a4cf3e1c92a37d7d8318a8deaad77faf7e3857e0b6d3e981ec6f9c8a3cff93c25aa24cd2096487bbd76d95b66c5f6b3ebc51ba6
-
SSDEEP
3072:0/J1fQoveyBv6G7DwexImgHKB+tsHOqhpo:vRyQG7DwHzKB+gOqhpo
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9396ba40b68b9cc7b3c446e50fa7fda0_JaffaCakes118
Files
-
9396ba40b68b9cc7b3c446e50fa7fda0_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 248KB - Virtual size: 248KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 124KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE