Behavioral task
behavioral1
Sample
c799ff318bc6f82df8b8d16732d1b058_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
c799ff318bc6f82df8b8d16732d1b058_JaffaCakes118
-
Size
201KB
-
MD5
c799ff318bc6f82df8b8d16732d1b058
-
SHA1
fd04f8cb35caae79cfdca88d279b5a57da5294e9
-
SHA256
9006ec3479981c3c39763455a88ae5c740642f132817db3ef3a1631c762c6208
-
SHA512
84b4a7884d46060087ec1201ba5b33a39bfe1817bb9ba07fff7db27787538ed55f6dbdbb1ad77b2065d535a72406639e19549a829132870181ab5d661b85f9f3
-
SSDEEP
3072:1WHKAJfLy2q9UKf3MGCbN3o9IQz993rQHpfe4B7puwSYSEOWMdxHa1u4+rYbXiDQ:NAdyfcGCR3nQzT3rMt/Bd3kZHqu45
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c799ff318bc6f82df8b8d16732d1b058_JaffaCakes118
Files
-
c799ff318bc6f82df8b8d16732d1b058_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.UPX1 Size: 512B - Virtual size: 460KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.UPX1 Size: 200KB - Virtual size: 217KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE