Behavioral task
behavioral1
Sample
bade8e383c2296c5c533aa5f1d8ef8e4_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
bade8e383c2296c5c533aa5f1d8ef8e4_JaffaCakes118
-
Size
122KB
-
MD5
bade8e383c2296c5c533aa5f1d8ef8e4
-
SHA1
fa894a2c7f10336fbb3fcbbfa5faab467e9cd214
-
SHA256
a8a51d28da7bfc0594a2bf727578b3be9e1f42ae0a3bb3659788fec4b3c2489d
-
SHA512
f2f31684d39f67adda77ddf032f1209a19709c2c471bd7af2e00c4c571e1fed426f7dcf72d1294f30b1791ac512cf728bf92b95cabc6cffa81802c2f6d666898
-
SSDEEP
3072:LQ7YrrnyD3UKT6Tb9tOWHQ0yF41+W9EaSRQ7YrrnyD3UKT6Tb9tK:LQaTakGC1Q0j8W9iQaTakGCy
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bade8e383c2296c5c533aa5f1d8ef8e4_JaffaCakes118
Files
-
bade8e383c2296c5c533aa5f1d8ef8e4_JaffaCakes118.exe windows:8 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 116KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 78KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE