Behavioral task
behavioral1
Sample
dc30cc0117a55118e08cc0c4e3e1d6b4_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
dc30cc0117a55118e08cc0c4e3e1d6b4_JaffaCakes118
-
Size
396KB
-
MD5
dc30cc0117a55118e08cc0c4e3e1d6b4
-
SHA1
b80197b8342d01787089fc2a0af70825814f761d
-
SHA256
8cb571de161e828506c4932912dd9bfbabb543c7a2efff467338b47bca3def70
-
SHA512
8d14ccc3c1b1cbf0a4ee08d300f25764bfa3bcc0b1c394d6fdfd1b01e6acad42edecd9e286d6024a1a21396452813d797ba09fa82a09088776a488f531cc476e
-
SSDEEP
12288:seQm7hNb7Hq/zH9MoXiFEBN9Z9IZ3R+OZSF:seQmnrq/TBSFEBLGB3Z
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dc30cc0117a55118e08cc0c4e3e1d6b4_JaffaCakes118
Files
-
dc30cc0117a55118e08cc0c4e3e1d6b4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 391KB - Virtual size: 392KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE