Behavioral task
behavioral1
Sample
ff53d82c83f49001df95c43b87eaab9a_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
ff53d82c83f49001df95c43b87eaab9a_JaffaCakes118
-
Size
28KB
-
MD5
ff53d82c83f49001df95c43b87eaab9a
-
SHA1
ba2a44a0db8d0da5a328917e363b7525f2db5e69
-
SHA256
9f7e45238fb9e8e0a5101cb5a31d507417d406e2e8a6c5928bff6a886313a0a7
-
SHA512
726983699057e47dd32a8658ef1bcdbe89285f4b46405780be22c786029c519242788c6e5c59b6cd9d4badc2bcf9e30df55a3521b1a32b25e89081d3f9bc3dc3
-
SSDEEP
768:Qrm375VXmSfeR6/Bq8K8TY7s2drrSly8tX7BH:QK75VXmSmfaY4KCQAH
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ff53d82c83f49001df95c43b87eaab9a_JaffaCakes118
Files
-
ff53d82c83f49001df95c43b87eaab9a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 244KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE