Behavioral task
behavioral1
Sample
d6ab0ee6c367c0a6e9f90228adea5be0_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
d6ab0ee6c367c0a6e9f90228adea5be0_JaffaCakes118
-
Size
114KB
-
MD5
d6ab0ee6c367c0a6e9f90228adea5be0
-
SHA1
c83d38b96c9cf4765e0e389bac286900fc620acc
-
SHA256
fb0e9c85fd448afbc5d340f0972c9fe535030eb8761909c3af2415603863c275
-
SHA512
17ed431f1a4761dfa7a55259258da8fa01e4aa19631aabc56c66476893d74587fba60dd0e90a6b013a33d823bdfc5b7f206dd742cd11ec038b148732432df79c
-
SSDEEP
3072:7TLPzUcObHqL3ArUCuXfqR8Egzd1Nu6R16dC/outnB:7TUHa306CMC6R16dC/oSB
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d6ab0ee6c367c0a6e9f90228adea5be0_JaffaCakes118
Files
-
d6ab0ee6c367c0a6e9f90228adea5be0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 952KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 110KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE