Behavioral task
behavioral1
Sample
c84a4e204ad46214a61ed949807faa7b_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
c84a4e204ad46214a61ed949807faa7b_JaffaCakes118
-
Size
86KB
-
MD5
c84a4e204ad46214a61ed949807faa7b
-
SHA1
8d5e21efe9cebdc0495d2ea67e52a5f705dd5c6e
-
SHA256
5ab90ed587123c0f449d7efc609b3b37238d486c0970f7506ff12a6b6fbb73c1
-
SHA512
444d9bbfc6a9851a29f4b4ede7e3f01e2b483ab0021e38d6ac0e10336ce662b9696c7f7ce6e91783d49919c1b257129640a1a6e3540b642ffc3b883a2957747f
-
SSDEEP
1536:CJiyNic7Jhgzille1FcOX0Cqyk+0MJUblMix+aC+iOOuFJPX46R102uK:CQ0JhZllmrkjhniulMZb9OOS39
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c84a4e204ad46214a61ed949807faa7b_JaffaCakes118
Files
-
c84a4e204ad46214a61ed949807faa7b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 736KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 84KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE