Behavioral task
behavioral1
Sample
f55ff9c992fef4558688eef43cf6fc8c_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
f55ff9c992fef4558688eef43cf6fc8c_JaffaCakes118
-
Size
33KB
-
MD5
f55ff9c992fef4558688eef43cf6fc8c
-
SHA1
24be80c729717ae69496ff5a50c7fb7d1e1971c7
-
SHA256
a7420b8d4434c2aa6a117c2a40f87f7e8a5d5a69e595ab486cb32eb46b3c9d80
-
SHA512
6657469ef6c41754441af9db815298031821b07ec9b1bcda0c95fae0bed13015a0791f99785aaa98983ca06678078e520a784f2e60feaac6df7d13b1e046fcb2
-
SSDEEP
768:y02jKi7m8YMCgvGiwdAvIArYe5g1VG6gHU8f+86AgAnrevzizRK1qpUVxx:y0YKCugvRuA7Ye5GM1fDBnrevOV0qpGj
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f55ff9c992fef4558688eef43cf6fc8c_JaffaCakes118
Files
-
f55ff9c992fef4558688eef43cf6fc8c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 52KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 36KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: - Virtual size: 1B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE