Behavioral task
behavioral1
Sample
ffdfd283cbeb46003ece9b39a7fbe29b_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
ffdfd283cbeb46003ece9b39a7fbe29b_JaffaCakes118
-
Size
189KB
-
MD5
ffdfd283cbeb46003ece9b39a7fbe29b
-
SHA1
3123d9f1d14f57155d426c82471a29db76a86e69
-
SHA256
427ac06af1b5d673307d0985c6deeb39c020ed143ab905858aab1f421a368a87
-
SHA512
67821c04815a9da8e9a1100dd953a02157d4de3a97b05cea17142fd0df8076f7a9a2a2a3671eba20b77025c335994884f39309439caab91f30d0ea0a23d5c8d8
-
SSDEEP
3072:SUCRrb3xnRXqu1WeXj04/9ube0+nA6tU4d/:SUCRrb3pWeT0xjwU4p
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ffdfd283cbeb46003ece9b39a7fbe29b_JaffaCakes118
Files
-
ffdfd283cbeb46003ece9b39a7fbe29b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE