Behavioral task
behavioral1
Sample
de4e28a4ef2f22cf7ab6fc61cbb6f48e_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
de4e28a4ef2f22cf7ab6fc61cbb6f48e_JaffaCakes118
-
Size
197KB
-
MD5
de4e28a4ef2f22cf7ab6fc61cbb6f48e
-
SHA1
303e472ed485975313cec4ee39f53e8d071f1e0b
-
SHA256
1984e2c2e5f8f0f7874111ef0283c36dcab99815f18f0975517c2fc2cc2d5c9b
-
SHA512
1c4dada5e1c2c9d83503a3ae7f2a4aded0fe25b4df711dc565c7bba3ba661f41445adedc7208bab8a121cb96b698dbecae100c6a529d3aab9af65abb7af222d5
-
SSDEEP
3072:6JqeNmQ2T5UVGdIuNOQgL898ASOeQkp4oi2mC5Yq7Lt/cUbyxQLgtNYiL6Qoutay:reIQwOGdI639SY2mK0IyxQLMNbL6QoS7
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource de4e28a4ef2f22cf7ab6fc61cbb6f48e_JaffaCakes118
Files
-
de4e28a4ef2f22cf7ab6fc61cbb6f48e_JaffaCakes118.exe windows:8 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 136KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 192KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE