Behavioral task
behavioral1
Sample
be6dd12d37a67232dd916d85f954aa93_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
be6dd12d37a67232dd916d85f954aa93_JaffaCakes118
-
Size
843KB
-
MD5
be6dd12d37a67232dd916d85f954aa93
-
SHA1
92d8b9dad31e2ce8d79a744c3269f8ebdbf5534d
-
SHA256
cd172291af161c8bad12f2e477e4281390c317a6c66aba22a16242071954bb12
-
SHA512
b72f165f2c120e222d7c75beb1225d248aac0fbf03185bc0636b9634adf8bc8c5245678b4dc91962ae0017ff554221116f564b3518724820b441e07505222ce1
-
SSDEEP
24576:l0TznnLYhVn1/KL0hfammORhM/lppLyCEk:o4aQpammshMNpp/
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource be6dd12d37a67232dd916d85f954aa93_JaffaCakes118
Files
-
be6dd12d37a67232dd916d85f954aa93_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 688KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 833KB - Virtual size: 836KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE