Behavioral task
behavioral1
Sample
d70949b1b4c3eeeb4085da7b856bc928_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
d70949b1b4c3eeeb4085da7b856bc928_JaffaCakes118
-
Size
93KB
-
MD5
d70949b1b4c3eeeb4085da7b856bc928
-
SHA1
0c2c9a438c667893efc85e0e5f6e071aa8790a16
-
SHA256
697e70dc238e691c29cc0cbe2572d723cb88a4f17f0f34d07d250ad4a41de8e4
-
SHA512
e0f08366648d8874d12f91b26d15ef8ce234cbb7cf425a549856aaa61e2fe2897dfe43c10e916d4194aef819848971b78cde635a6ef7bbc4ec6d5cca8128095c
-
SSDEEP
1536:pPx7yO4F5Z4ZST9NNInp3T0TaPeWoZ+YWR4QJcGcy3:X7ynF5Z4ITpI3ZPfSScu
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d70949b1b4c3eeeb4085da7b856bc928_JaffaCakes118
Files
-
d70949b1b4c3eeeb4085da7b856bc928_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.8MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 85KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE