Behavioral task
behavioral1
Sample
d3add8c0382023613f4b8f72f7051e14_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
d3add8c0382023613f4b8f72f7051e14_JaffaCakes118
-
Size
568KB
-
MD5
d3add8c0382023613f4b8f72f7051e14
-
SHA1
fb8aaf9a0ba8e75974e390af20c5d269716cbbb8
-
SHA256
d2611f12eaa812fb661fbdea02ca430b28fca381bdd812604c665eab32e4f610
-
SHA512
b74db5cac67fef3f3f4ce93352344db4212e7d243f074a2bd9ebbc58ef46f00b092cdeba378a42facc991e847c8f192531222d7142aff76c9fef4552685ff31b
-
SSDEEP
12288:FNxHRSDN5qPl/00v5fvYlJr/xjkmrj4kZ5x1eeqm96J/tbAV:FnHgq9cgfvQTkmrj4krYmYJ/tbAV
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d3add8c0382023613f4b8f72f7051e14_JaffaCakes118
Files
-
d3add8c0382023613f4b8f72f7051e14_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 204KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 176KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE