Behavioral task
behavioral1
Sample
d9a52f38e3d6c36cc45a961221b4f3aa_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
d9a52f38e3d6c36cc45a961221b4f3aa_JaffaCakes118
-
Size
437KB
-
MD5
d9a52f38e3d6c36cc45a961221b4f3aa
-
SHA1
f41e6cdd085f0f935d91e094dfd216e1cee1f51b
-
SHA256
751b461e5d0f2f264e8a8536fe7262131fb12a2b7b9dd2c6daa611bee3da0c7e
-
SHA512
47419df0af81cd87b75f1351fbeec7e14446f4bea73b7b1531416d2af66a04b9195480e6c5b5f7083cd03dd7c85b84748f408e8f96b76d6a8f1d0d6ebcfdf849
-
SSDEEP
6144:nuaNvw9IMGUIosJAx2VXrFMaHE0qwtGIfZEPVNJMkCaLH241fxoENfgmxYD:6IMGUe6x2VX5HT1Zkn+kCAzoEN4m2
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d9a52f38e3d6c36cc45a961221b4f3aa_JaffaCakes118
Files
-
d9a52f38e3d6c36cc45a961221b4f3aa_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 232KB - Virtual size: 232KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 170KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 34KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE