Behavioral task
behavioral1
Sample
d46372dcf83f28ac7ad37870b7884f3c_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
d46372dcf83f28ac7ad37870b7884f3c_JaffaCakes118
-
Size
673KB
-
MD5
d46372dcf83f28ac7ad37870b7884f3c
-
SHA1
5a993632e9b04ded4b82725c6de3519f9681cc71
-
SHA256
d80a64ed072f0ede773e4aee163ff7d839c49d0bbd70e27b97851f596cb4b62e
-
SHA512
82235a8475b5d85afeacd6af9f28ce563738e34d4f47647c152ae9fb7e03279b3ff35e352ec750ced7ac3af661b37aae9c96cccad429c30ae6ec4bf341f28693
-
SSDEEP
12288:cQoSUfmJRAZpxWgRNYRq+B6fZKbYT9lPuNeJlJsJe7NDg9ctAh1/zsQ2zL:cP0AZLRNSpBmsbYT9meOaNDg9cgj2zL
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d46372dcf83f28ac7ad37870b7884f3c_JaffaCakes118
Files
-
d46372dcf83f28ac7ad37870b7884f3c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 280KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE