Behavioral task
behavioral1
Sample
ff84e10ff97ef5c88a56f717e8f26812_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
ff84e10ff97ef5c88a56f717e8f26812_JaffaCakes118
-
Size
333KB
-
MD5
ff84e10ff97ef5c88a56f717e8f26812
-
SHA1
1107413c4bfcfb0f6b03610f841e684cc4ba119f
-
SHA256
87759cb5c32b23e18960f0c1382102d86eb6cdc686abd80394606108debdb69c
-
SHA512
efdde946b522ef18da9f24e71ea2426ecc060ef5fbe3d72806512732061b2567dafcc781f2fc922088ffc79cbeeef8d50409263c870b6695c3e657c8ad252556
-
SSDEEP
6144:H9cayFdD73xJQ1WKznInHjdq+kpxjq4/iwAJacFPAwKrByrjxep1f38QTIzn:H9rY1P6vzn+fkp6Lz5KrcrjxeXN8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ff84e10ff97ef5c88a56f717e8f26812_JaffaCakes118
Files
-
ff84e10ff97ef5c88a56f717e8f26812_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 516KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 325KB - Virtual size: 328KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE