Behavioral task
behavioral1
Sample
defafd7d411c73983d52b20709e42f2f_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
defafd7d411c73983d52b20709e42f2f_JaffaCakes118
-
Size
177KB
-
MD5
defafd7d411c73983d52b20709e42f2f
-
SHA1
8d3bb01f80727cf9eecd1572fc7a0a6b7e004b59
-
SHA256
59768b09d13601b0c06f819c933be1067a080de37e367c122fd5352bc8834a75
-
SHA512
24ac88794c0cd3a19ff7a615df065e4253be639dbea11cff08ba57785727be153c8ae17c5d1792f2910bda0066e9d4be17a462d2178d3c5e2c8f251617a0d129
-
SSDEEP
3072:1kEy+E5CZ4BR0o+DtqA/noXYegnZ7qoslhDB+dW/qPF95WJKx2756JVc:1kEy+E5CZER0o+DtqA/ovgnZolpIdWiZ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource defafd7d411c73983d52b20709e42f2f_JaffaCakes118
Files
-
defafd7d411c73983d52b20709e42f2f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 69KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE