Behavioral task
behavioral1
Sample
d1eb618d8d388d17271458d2c3eaa3b9_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
d1eb618d8d388d17271458d2c3eaa3b9_JaffaCakes118
-
Size
784KB
-
MD5
d1eb618d8d388d17271458d2c3eaa3b9
-
SHA1
487910ab054cf2b0d2a8aad3eb51eb953e9df9db
-
SHA256
771f2ef424de4ced493916699da64fb39922d61f0e28993c42b11a9669425859
-
SHA512
967e5627adf4254c874b9bb99495a7e8c74f8487488fb702333e2ff0f7f0104fcae7d24fc96f5ad530b75c456be0f8f8786766d8406a933e9b3b91a9a16aea36
-
SSDEEP
24576:fodXMXQ5ybAIId+zaDyA35+S8d7K1f8kI:AdXM2ybAlHDZ5IdtR
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d1eb618d8d388d17271458d2c3eaa3b9_JaffaCakes118
Files
-
d1eb618d8d388d17271458d2c3eaa3b9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE