Behavioral task
behavioral1
Sample
de1f47d4581346813af5039b6f2f4f1d_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
de1f47d4581346813af5039b6f2f4f1d_JaffaCakes118
-
Size
193KB
-
MD5
de1f47d4581346813af5039b6f2f4f1d
-
SHA1
f61617554b6a7cb1321efdb3695d0b5e6e8fd4ce
-
SHA256
b77e55f0aeae8be842f42825cd0290e3ec5ad0b5859c252834eb84f86a7ae7e8
-
SHA512
8eefbb3d50931f11074c0135a4d0d2961b5f42ea4b786b56f95b8ab6f40db401b34138436a03bd42211985bdf60389b4590591aed302cd08c7b3214090832188
-
SSDEEP
3072:rFlUZNl0GHSVr7e0u7qiFLFvxH/PmwJWZiQk4wP0AdyK7z0a:rgLS+Nhvt/dJWQUwPz7t
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource de1f47d4581346813af5039b6f2f4f1d_JaffaCakes118
Files
-
de1f47d4581346813af5039b6f2f4f1d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
�PX0 Size: - Virtual size: 124KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 37KB - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 61KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE