Behavioral task
behavioral1
Sample
dc8c2d3e73ef391ab35df58a727fe6ec_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
dc8c2d3e73ef391ab35df58a727fe6ec_JaffaCakes118
-
Size
197KB
-
MD5
dc8c2d3e73ef391ab35df58a727fe6ec
-
SHA1
ebcb7cc74922d238f2d58342f937ae47dc0214f7
-
SHA256
c9563dd12a4b6452e3bb7f5198fab672f0de19ea6e8eca9500959d6b63df1dc4
-
SHA512
a1f76814336442089a8e14262ac5e396586d3b0dc88d0a21ea6f29428adfd3c029cdb68cbdea4812a4e2eee8fea7a9c34b249cce7905d8808dc98ea3d8b95e91
-
SSDEEP
3072:cxP46B3hZ2I8wr7SAE7hXTpZTMfqkWHK7r4OytpXhgTM:eJP8wnSAE7hDDAfx4pFh3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dc8c2d3e73ef391ab35df58a727fe6ec_JaffaCakes118
Files
-
dc8c2d3e73ef391ab35df58a727fe6ec_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 133KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE