Behavioral task
behavioral1
Sample
ff09ca6d3babfc14371b42f5003c1a3b_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
ff09ca6d3babfc14371b42f5003c1a3b_JaffaCakes118
-
Size
23KB
-
MD5
ff09ca6d3babfc14371b42f5003c1a3b
-
SHA1
c4b7dfd9ca0dbb2b99b0387720ee66223277bbc0
-
SHA256
1c220f69e9adf0f8fba658a28833654125e12ed63d87be70620412f175b20f07
-
SHA512
befcbbd5bdcb22302013913578e343c20dd68f61c3977c3d3f9dbc64fd47a8df1954ddc0c5f6c241647763da56b76a1b2637d6048c0ce3415bb5637621aa6a47
-
SSDEEP
384:M/CVVlw+gcYhcMKRPiSCxQC42wXDI0fURiRkIXgooA5XNkA4svpYeC2sL2uf5pZu:q8VlwxldK3Cs2wXs9RiOIXgY597TqesC
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ff09ca6d3babfc14371b42f5003c1a3b_JaffaCakes118
Files
-
ff09ca6d3babfc14371b42f5003c1a3b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE