Behavioral task
behavioral1
Sample
c83b966a0caae3f1653a0a7230c242d2_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
c83b966a0caae3f1653a0a7230c242d2_JaffaCakes118
-
Size
3.9MB
-
MD5
c83b966a0caae3f1653a0a7230c242d2
-
SHA1
f91af8e7b2fad4c5c553c105a51a12757515cab2
-
SHA256
2eafc210e82d8c5ac5aeb0ef7f043893f44088d7e5993d49803616196fd61612
-
SHA512
fbce3f73334ca435cb5635534ba8d5a17875e726a505a61f05480dc231e994f0033eaceec1f3ee38f04e13609bd47c91a2efef9cbfdeed4d64133b572b92b06d
-
SSDEEP
6144:xODi7hbbFN+gS16KB7ZPoS3sZtqcSZtcD:IiHEgy5PoScZtqdZt8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c83b966a0caae3f1653a0a7230c242d2_JaffaCakes118
Files
-
c83b966a0caae3f1653a0a7230c242d2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 3.8MB - Virtual size: 3.8MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 98KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 41KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE