Behavioral task
behavioral1
Sample
d736faed3ef19433d4bcef36c0032df5_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
d736faed3ef19433d4bcef36c0032df5_JaffaCakes118
-
Size
784KB
-
MD5
d736faed3ef19433d4bcef36c0032df5
-
SHA1
d6ed81af358848042f77aa722ac5eb6bf2ed80ea
-
SHA256
4e85dcb02985b0f007129c637a41055e5e9ed0dd4a26d64d6b44b7e15b1b1c08
-
SHA512
cc303045c88811ebb8e0af1d2c4def54babc4f0631601fc0055306f9922ca91d21842f9057930d1776fe8f3cf1f86560dd5595cb715003b4dff7d9678d30a3ea
-
SSDEEP
24576:YZ+IvMjUwhn1A70+49SrVSEzahqkeVcS:Y7kpc0r9cVSEwT
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d736faed3ef19433d4bcef36c0032df5_JaffaCakes118
Files
-
d736faed3ef19433d4bcef36c0032df5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE