Behavioral task
behavioral1
Sample
affd9f55cf0f3aa5dba492b432b135b5_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
affd9f55cf0f3aa5dba492b432b135b5_JaffaCakes118
-
Size
784KB
-
MD5
affd9f55cf0f3aa5dba492b432b135b5
-
SHA1
7ed0cb71f751f88230bd9ad632965b5a5bcc52a8
-
SHA256
6c17efcc1a1ea66b7440321352aae1a7d588d2a57e5c3b5c2e92a703cc4be36c
-
SHA512
f3a0b7709bd2bd1e8bca374524489b88a3976736e7bfa3568dc36a0ec1d945d46b9338b75cf4f82c4e74a4e4e59deeaf5d903798315485943282e40af9d82705
-
SSDEEP
24576:eUZKVaRdlcCxQuoVk8atPAGF/q8UiZ24aSWt4lAv3:eUZxoCxJFJOPttCAv3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource affd9f55cf0f3aa5dba492b432b135b5_JaffaCakes118
Files
-
affd9f55cf0f3aa5dba492b432b135b5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE