Behavioral task
behavioral1
Sample
10dcf60cecc95e0eb29f64ba48b4e96d_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
10dcf60cecc95e0eb29f64ba48b4e96d_JaffaCakes118
-
Size
139KB
-
MD5
10dcf60cecc95e0eb29f64ba48b4e96d
-
SHA1
74732944b493d22950eb288e5b1ac9dd20e14457
-
SHA256
dd8d28b46c67fd565d196baf472ae6b430db588b980490ce2e4f7c81cfbc10c1
-
SHA512
67cb1681a3ef3981c78fc1eb378986483fa2dd6a7fcda64b971d79238a7ab54feac49053e1eca50b8dc71e47a544697d8308899c6db86c4d00dba8b14e76e38b
-
SSDEEP
3072:sY8dOft/2ZBfVUmHYmT2KnmEamP8PK1PAkc7outm+dXwQl:VIOftuf9Um4U2Kng+QK1PAvoSm+yQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 10dcf60cecc95e0eb29f64ba48b4e96d_JaffaCakes118
Files
-
10dcf60cecc95e0eb29f64ba48b4e96d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 276KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 101KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 37KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE