Behavioral task
behavioral1
Sample
de27f3116d30f18d07b169e9b1978f90_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
de27f3116d30f18d07b169e9b1978f90_JaffaCakes118
-
Size
152KB
-
MD5
de27f3116d30f18d07b169e9b1978f90
-
SHA1
7556bc658dc2e6378c99776d213ebc97a444c7ab
-
SHA256
4ff5e5e7dd028de618162a930330dce298768ff9faccb9e5631f0b18b6ca04b3
-
SHA512
a381eee273f5c565e3ca0054c1145055be3051b94a9ba33bc422f69419caf9937a38929ee5406bc712c97442a8b44a2d56cd6ffd36c51cbe3fbfe64ca5c4c275
-
SSDEEP
3072:IIWU8kuwd9esdrSwgecDHWhCbGRIfhIeitRUf7qbf8mJdb3p9c9ueM:/gkfemNrUH7i9qf7qbf8mJ18M
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource de27f3116d30f18d07b169e9b1978f90_JaffaCakes118
Files
-
de27f3116d30f18d07b169e9b1978f90_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 45KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE