Behavioral task
behavioral1
Sample
d0a476f3045eee8c3f81b02b9eb2602c_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
d0a476f3045eee8c3f81b02b9eb2602c_JaffaCakes118
-
Size
784KB
-
MD5
d0a476f3045eee8c3f81b02b9eb2602c
-
SHA1
c94c6f593dc6e05e440704ca9a37bdb416e1fb01
-
SHA256
86f40c1bf5d56880e10c7f3bacfaca646d61e0acdec5904fa16720c89d9f4b02
-
SHA512
84c59b2f293b4ceab43e7c9df2ce6697567a9693c5285dd25b76b7fe2d6822d05cd75d4d535521f258cc118f316e92f047c73e999811584a650de9d2847398bb
-
SSDEEP
24576:UFJ8+5UD9OwqIMdypWefszwueM5mt7x8kck1:U8LqIMdypWMszwueOmtCxk1
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d0a476f3045eee8c3f81b02b9eb2602c_JaffaCakes118
Files
-
d0a476f3045eee8c3f81b02b9eb2602c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE