Behavioral task
behavioral1
Sample
efd250fecb457c28829d37df5b92c762_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
efd250fecb457c28829d37df5b92c762_JaffaCakes118
-
Size
49KB
-
MD5
efd250fecb457c28829d37df5b92c762
-
SHA1
f08afdd2391fb7fce54c38a55c73276496d3e966
-
SHA256
89c03fa8c770cd981282cc416c6f1be194c48ccaa544b326c95e88f4602c8436
-
SHA512
51f8320acbbabefb0b22e6a21203b1477b07bfe39864de0732b8f75a1a49c36761896130d2832d0e9066dc03beba50a64c5935dbae52e895dce59dbbfa8742ca
-
SSDEEP
768:DhrXg+WKWW4e5GibflwnYgpulxnbcuyD7Uy06AGZ9ApNZp9E31D/raV4q:D1g7KWW+i53gUfnouy8vJ1TE31D/Pq
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource efd250fecb457c28829d37df5b92c762_JaffaCakes118
Files
-
efd250fecb457c28829d37df5b92c762_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 84KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE