Behavioral task
behavioral1
Sample
d1d24850c1a683c370e108c3d01baf0d_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
d1d24850c1a683c370e108c3d01baf0d_JaffaCakes118
-
Size
506KB
-
MD5
d1d24850c1a683c370e108c3d01baf0d
-
SHA1
dd0160e585f9fb6b54b6ca4bbb2c6fa5560bee7c
-
SHA256
855313ef2fbc9f8fa80b0ddce011e6586d7b29e0cdeccde4dba9b5369b3bb3a7
-
SHA512
9200a1c935b6d709df426aa103adca6802f385b0382821165b73793df562b2d166834bc10d0cb04c1db4b3b614c0be0140b04a5496bdde063b2ad3b11b1b0923
-
SSDEEP
6144:aaUhMk70XLC1t9N9/W76hVj+VD3hbcd5SVtY/nWMSqKMXGY/uqp:aqkeLCP9NyEma3l4fM
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d1d24850c1a683c370e108c3d01baf0d_JaffaCakes118
Files
-
d1d24850c1a683c370e108c3d01baf0d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 292KB - Virtual size: 292KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 211KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE