Behavioral task
behavioral1
Sample
104408d41e82087c3b38188fe4128920_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
104408d41e82087c3b38188fe4128920_JaffaCakes118
-
Size
84KB
-
MD5
104408d41e82087c3b38188fe4128920
-
SHA1
53c03ec212bc5622c51bd720af17ddb14c60d710
-
SHA256
e150bc17c63f2a37ca504821972a89a4d4bed8b280f69803fc7d6817b00717f9
-
SHA512
ea0c9fb1ce5234b5b72cc11fa875e92c96a62bd46ba87479762dcb101466623391d6a7200641ef740fe445b4ac1430e571592da6f0151b58d0148b2125b15ca4
-
SSDEEP
1536:EVtwLeVEtmcvgzEHhZVHRuyslWKopLuyVS93146ceJ2W6xvdBAbRIK6eiyAz:Emm3EHRRuykSbVS98j/B0bRz67z
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 104408d41e82087c3b38188fe4128920_JaffaCakes118
Files
-
104408d41e82087c3b38188fe4128920_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 200KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 56KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE