Behavioral task
behavioral1
Sample
d412d62035bbdddbc66537cc99790f4d_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
d412d62035bbdddbc66537cc99790f4d_JaffaCakes118
-
Size
11.8MB
-
MD5
d412d62035bbdddbc66537cc99790f4d
-
SHA1
74ec536563680c2b2db01e3455ad130a62f99626
-
SHA256
849f53c65b7b9fcc63721f06792c8952764c103662f314cb3ca7d243bc1d22b9
-
SHA512
4ec9bc20ab8ab071d107f7f69fe2ebb0900b1cdd7d6a36e5bf50e4a2bd7e7332e6dd916ef9f1671075c3ccaf65cd504bd8f62d9c5a3e566936172cd3f61fc6a4
-
SSDEEP
196608:bfaglSX10rkOh7FkNqKTmotX0rkOh7FkNqKKrDUZPey0rkOh7FkNqKTmotX0rkOl:bfax0rd7upTDX0rd7upj8y0rd7upTDX2
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d412d62035bbdddbc66537cc99790f4d_JaffaCakes118
Files
-
d412d62035bbdddbc66537cc99790f4d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE