Behavioral task
behavioral1
Sample
ff31d584a72f8d71c5c559b2fe4c586e_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
ff31d584a72f8d71c5c559b2fe4c586e_JaffaCakes118
-
Size
229KB
-
MD5
ff31d584a72f8d71c5c559b2fe4c586e
-
SHA1
ea48430d6e655e1caab78745b3125e04991c7ae1
-
SHA256
ce421e0d8bd933401df7cf748baf99f1b9ca1287e2d393c5555961246e4a51b0
-
SHA512
a19ab49c58eeb40947ecb25e4db0e75cbdbeeab29b115737864afd74a75d62ebc5d293dc89dd3a1404b92225ce13b99c159424bbf22631756f6fb8e7e8ceb281
-
SSDEEP
1536:EsHQjWe8PiMMTRETRFnCnU6GOVkfIA1SyYLRsdmJXXiqNk+85+8e/wjM:EsH7HM2HCnU6+1SyZOiqH8M8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ff31d584a72f8d71c5c559b2fe4c586e_JaffaCakes118
Files
-
ff31d584a72f8d71c5c559b2fe4c586e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 112KB - Virtual size: 112KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 61KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 55KB - Virtual size: 144KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE