Behavioral task
behavioral1
Sample
d6858cf09f8ff5076cdf503261cb3f26_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
d6858cf09f8ff5076cdf503261cb3f26_JaffaCakes118
-
Size
5.0MB
-
MD5
d6858cf09f8ff5076cdf503261cb3f26
-
SHA1
447a6aa51385bfbf72e2eaef8b4d24865d4d3f82
-
SHA256
2ec896eddacf3ba8eddf100e7d37c6b44e9c0006b6fd82a6f53d126e0dd0cc37
-
SHA512
a82c1b0f358157ec0017d8b6af09940ec8fdb80450654bdd178caf1d96c0c443ba52dd121c0d2fb9073bd893d22ff522219f503ff3f19413d1be9e4602a91b38
-
SSDEEP
98304:1lEwLmJgKom3yxHd0ah0zcz226czxd3hyQoTuIK9ssuueFV:1S/ovh0zcz26zv3loTu79srrV
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d6858cf09f8ff5076cdf503261cb3f26_JaffaCakes118
Files
-
d6858cf09f8ff5076cdf503261cb3f26_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 7.7MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4.5MB - Virtual size: 4.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 499KB - Virtual size: 500KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE