Behavioral task
behavioral1
Sample
d4b213251e72b5bae30c2e5461fd896c_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
d4b213251e72b5bae30c2e5461fd896c_JaffaCakes118
-
Size
256KB
-
MD5
d4b213251e72b5bae30c2e5461fd896c
-
SHA1
34fbce4e92bcf634faa2e2138c853f8e2528e375
-
SHA256
6a711506a2689df4a0732bdabbb48639c27292111e65567b827f3e3e04fd0a90
-
SHA512
029e1c95267963c9d86b1e8ee64a09bc42827a03f77ec08c1b77658f283a8c3fde34a985fa8e23f038455f0c5b6a821aac02af0fbd56c313577f2d234a37ac1d
-
SSDEEP
6144:J8Lib/KPS9x3vnXBwenQvD3DbkJAnDECT9AaYgWa3eIOvLily:HbiPOfnXBwenQb3DGAnDP/1leIhly
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d4b213251e72b5bae30c2e5461fd896c_JaffaCakes118
Files
-
d4b213251e72b5bae30c2e5461fd896c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 168KB - Virtual size: 168KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 58KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE