Behavioral task
behavioral1
Sample
02d4628a9d287825ca18d7b3263eb2c6_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
02d4628a9d287825ca18d7b3263eb2c6_JaffaCakes118
-
Size
68KB
-
MD5
02d4628a9d287825ca18d7b3263eb2c6
-
SHA1
fd474a573bac6dd10d769a54ffe93077b8017f65
-
SHA256
b087937db2dffe018b529a1a4bcae2fd7d95ce6d90e9119a022cec62c15c8110
-
SHA512
f25f3fe484f2dc8da44a1e54ef43b5002f74e82f1d355c61516458f79bf278f98b10fd08aa61b97e049c1b2a547e8c6cb7f587e7b9a609101cb0c5ff7647df2a
-
SSDEEP
1536:LhKEqhSmly1tvTQD/krGmKeQtMwcqQ8fmiWqUpOL1wn8N:1IXgNT6/krnKeQSb6gmZw8N
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 02d4628a9d287825ca18d7b3263eb2c6_JaffaCakes118
Files
-
02d4628a9d287825ca18d7b3263eb2c6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 59KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.EiTheL Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE