scan
Behavioral task
behavioral1
Sample
d63ad32e7adb14d7595256fd0fdbb482_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
d63ad32e7adb14d7595256fd0fdbb482_JaffaCakes118
-
Size
15KB
-
MD5
d63ad32e7adb14d7595256fd0fdbb482
-
SHA1
8747884231c7cdc7d7c5373096a60f0978304a2d
-
SHA256
0a62c1ee0de9f9abbc992ee07fb14ef0db06b77f11f2fc5cce84d64dc1087795
-
SHA512
58fd2437f5ad792c608ddda75fcc66c41c49304d44ff98b5dbf3356a29899981ed0d9d3a2cf316d915b3686f803bfd5ddd1d86e784610986deeb9fd9ce076e5a
-
SSDEEP
384:obiZcsyBX0Q7ad2qRU38F/M8OjINw9AhvgHOjF86UAfCoIYpt18:XOjX0vRY+bS2hvvq6UAKFYP18
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d63ad32e7adb14d7595256fd0fdbb482_JaffaCakes118
Files
-
d63ad32e7adb14d7595256fd0fdbb482_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
UPX0 Size: - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE