Behavioral task
behavioral1
Sample
d35de4a164d54c5b510f4ce6d1e3fa8c_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
d35de4a164d54c5b510f4ce6d1e3fa8c_JaffaCakes118
-
Size
437KB
-
MD5
d35de4a164d54c5b510f4ce6d1e3fa8c
-
SHA1
fa880968882f8cd5c0c50b333c819a3b422e30c0
-
SHA256
2c40e4526f2927a6198dc0e3820437fe734e5c3a8c9f6f89b66a928dea670bca
-
SHA512
c87302b3c910f6bba4e5adc88fc6b5184e02d0515778d7966e30175d0a6b8a6fa56680c88eb7c3d627721447c99db34c452f9f606e271d385bc4e33ad3d0c856
-
SSDEEP
12288:Wy+oLT4rnvk4OUO77dwBT/b21GGQQy12:Wy+DclUO75wBXAGr7
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d35de4a164d54c5b510f4ce6d1e3fa8c_JaffaCakes118
Files
-
d35de4a164d54c5b510f4ce6d1e3fa8c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 968KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 434KB - Virtual size: 436KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE