Behavioral task
behavioral1
Sample
be2afcd17f60fe92a5d0df727abd87b5_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
be2afcd17f60fe92a5d0df727abd87b5_JaffaCakes118
-
Size
784KB
-
MD5
be2afcd17f60fe92a5d0df727abd87b5
-
SHA1
bc7d164274bc2540500393443f858e2b6a414571
-
SHA256
31d0bf4547827e4c8f412b5f8d076a3399163f63c371ff8d778edec9bf21bfe9
-
SHA512
f62b9a5e7f998818597db3961a6272d483ddb94435c31dda711992b2913e14636306d14dee59b46399a9c61cb3f454806f9489ffb7b10c108aed4d2c8dcae23e
-
SSDEEP
24576:MZO8Tv6hjaoo8CPPfyEHVZSf3HBFOff7q++5VNnO9DT7kk:IO8TOW8CLSf3hFOm+S+b
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource be2afcd17f60fe92a5d0df727abd87b5_JaffaCakes118
Files
-
be2afcd17f60fe92a5d0df727abd87b5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE