Behavioral task
behavioral1
Sample
05dd58d697c6c354c058bffb6cfd1b0f_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
05dd58d697c6c354c058bffb6cfd1b0f_JaffaCakes118
-
Size
276KB
-
MD5
05dd58d697c6c354c058bffb6cfd1b0f
-
SHA1
0f9b9d8ef7b4cd864dc742b69f3fba4e820d59f6
-
SHA256
f9d7688115adf79deac03181da39528a033d2ab799d53c9cdc70eb08b5dd59fc
-
SHA512
99bbe2ac5b1bce4e9db3b32e4e1c1bbd915edc6a08098d6ddcbacaa0785da86b51d75d83eff482caff598c13c8580c3f7dd0f0f3973a5bdcfd9a15a78da0ab39
-
SSDEEP
3072:QdEUfKj8BYbDiC1ZTK7sxtLUIGcly6aqOn7ACE89zMfo0z3YRmmG8cly6aqOn7A/:QUSiZTK40wbaqE7Al8jk2jcbaqE7Al8Q
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 05dd58d697c6c354c058bffb6cfd1b0f_JaffaCakes118
Files
-
05dd58d697c6c354c058bffb6cfd1b0f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 496KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 77KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE