Behavioral task
behavioral1
Sample
d4d7a33a5838e43fd4bcaac878feb854_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
d4d7a33a5838e43fd4bcaac878feb854_JaffaCakes118
-
Size
9KB
-
MD5
d4d7a33a5838e43fd4bcaac878feb854
-
SHA1
193f3ccc96d96c336034f9d574a5e8253350ae35
-
SHA256
7282763e35f1fc907da871ee7a4b4bee6d3ae86f4a58ee0d857d113cff4939cc
-
SHA512
96a5ceb3c8a33ee5b140399ce4078d2258c95e3e0f802caa47f9a159f4c84ec1b3858eef407c037e3acc6bdb44dd5d63ecc7c41d2458c3923b2db7dd05f0df18
-
SSDEEP
192:VukPyR1SI6/fZgT95bNF75RP0tt5aes0RbqLTmX85FysLvu:LPyR2fGT95bnLPezaeZbxs2sa
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d4d7a33a5838e43fd4bcaac878feb854_JaffaCakes118
Files
-
d4d7a33a5838e43fd4bcaac878feb854_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE