Behavioral task
behavioral1
Sample
c11fda8a01c936ed200f75269c4fe323_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
c11fda8a01c936ed200f75269c4fe323_JaffaCakes118
-
Size
285KB
-
MD5
c11fda8a01c936ed200f75269c4fe323
-
SHA1
8c3578103d75d7ad44916dec08ffecfc5a8a2cb8
-
SHA256
093f63b6ac577ccf35cb2c5e3241df7450f8f8c93f0148ac523bfe2a8068d7a5
-
SHA512
3eeb5b90d26239ceb9e6a1ed7894c93bd24d7a56f7dc1d2e1fff3c1c5dc336c7f57c3ecf43749b17c3ecc71e106cf4a80af58eedcad2509ce948b21da777b46a
-
SSDEEP
6144:gO5grOGhewLelzHo0jHvWFHENsZ44517FzeJ:9gvhew6lFHvq4sle
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c11fda8a01c936ed200f75269c4fe323_JaffaCakes118
Files
-
c11fda8a01c936ed200f75269c4fe323_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 252KB - Virtual size: 252KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA