Behavioral task
behavioral1
Sample
13cdd7ae2607403264f1b7c4a84f5732_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
13cdd7ae2607403264f1b7c4a84f5732_JaffaCakes118
-
Size
273KB
-
MD5
13cdd7ae2607403264f1b7c4a84f5732
-
SHA1
76ee6682167a2e1268fc146a88a2686928ee17b9
-
SHA256
ea11c0111a005bd2d98d1f666600579aea90ca63f1c96b7b72c8ca496c5306be
-
SHA512
aa0e587049821b3c44526bb8694559823d9132ceaa3bedb253fa22ad2ad9abd8ddbb2ee2dcf9dcf8ffeedf8ec2a8181a0abc22b0a8a80ecbe50ff98ee07d0045
-
SSDEEP
1536:6hv0qOcebbPpN6j8JMEdlM66c+qBxX3s7/lrxCAqwdDbb2Ux3NgRUmvHVGrSXxy0:6fOlIoXoNDqHky9qb49MEctKYQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 13cdd7ae2607403264f1b7c4a84f5732_JaffaCakes118
Files
-
13cdd7ae2607403264f1b7c4a84f5732_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 220KB - Virtual size: 220KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata2 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE