Behavioral task
behavioral1
Sample
04ffdaf93c5f22c0ba7c5315aa9eaf82_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
04ffdaf93c5f22c0ba7c5315aa9eaf82_JaffaCakes118
-
Size
1.3MB
-
MD5
04ffdaf93c5f22c0ba7c5315aa9eaf82
-
SHA1
0c1c0ce4bd255c923c66fb66928ccc88b47e7376
-
SHA256
237bf14778eb83efaa5da08065f5e278d2c4f095d1ba9de8a7454f12fb014d0d
-
SHA512
83fb3d0bf646ebb108944920c38eafc4aaffbc272fab414d48142f554829386ea946b2a4c8537d7601090e8e4c3e7849ec8675b156d5d4848534c03d0fea3be5
-
SSDEEP
24576:Yao8yKXXT08SAyMV20ayV5xjl2jITnIpp0nxjJ0QlxyAi9DxAvG:0Kn48SZMV2pWIkIp8LflxyAi9Dx
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 04ffdaf93c5f22c0ba7c5315aa9eaf82_JaffaCakes118
Files
-
04ffdaf93c5f22c0ba7c5315aa9eaf82_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE