Behavioral task
behavioral1
Sample
b3d42717b67f9aa4025c4403762a81f6_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
b3d42717b67f9aa4025c4403762a81f6_JaffaCakes118
-
Size
15KB
-
MD5
b3d42717b67f9aa4025c4403762a81f6
-
SHA1
daf22c3f940abe55c97c1db212560ce8db1ba32f
-
SHA256
711b53c59d821b54ea74d7afa772ddd82d3bf73ce0a1b01c6665b988b0bce885
-
SHA512
bebcd274a152fb8edcf4ababd52b20330830e901de3f127d5235f364cf18468ca6640604c5fca247971ea6092988222e77812deb9a2df3031d3cd7982a3249df
-
SSDEEP
384:C4TH1kHC0X0XhgujVtu00AoOe1wt0vphxdjg4Lj2A+Pt:tkHdkXhggC00AomivphjEmV+Pt
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b3d42717b67f9aa4025c4403762a81f6_JaffaCakes118
Files
-
b3d42717b67f9aa4025c4403762a81f6_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPXA Size: - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPXB Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE