Behavioral task
behavioral1
Sample
ddf9ad418b84b42f4ecccc42c29229e3_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
ddf9ad418b84b42f4ecccc42c29229e3_JaffaCakes118
-
Size
353KB
-
MD5
ddf9ad418b84b42f4ecccc42c29229e3
-
SHA1
3f99101d7b8c95c573e028e3dbe1cccc8c05b8c9
-
SHA256
1b2d7b5b6d2de81778e00a3875d6e1ca454c41b12360294a2bf5a94126cb2260
-
SHA512
12fd63efc6367d9a26d0e3ab01b38c00d98f0565bdd2acfc93996d16ae7a7be010ec059d20335db3576f2e779adf15160a12fbab7914c1033f911128674bcc74
-
SSDEEP
3072:U0BPryGI19v2TtFz0ewCH/UwNIwenHj1U6kP/KvMG2PvhhUkvsQ7vz2:UmrE9YtFI8/UwteDpxahhlkQ7S
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ddf9ad418b84b42f4ecccc42c29229e3_JaffaCakes118
Files
-
ddf9ad418b84b42f4ecccc42c29229e3_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 228KB - Virtual size: 228KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 119KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE