Behavioral task
behavioral1
Sample
14bd8af6005d46f6e5baf19f17aae1da_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
14bd8af6005d46f6e5baf19f17aae1da_JaffaCakes118
-
Size
1003KB
-
MD5
14bd8af6005d46f6e5baf19f17aae1da
-
SHA1
2d723f18207d8647fad2d28a0381702ad9cc9c4c
-
SHA256
1288d6a37253e25033e82b2d5376a396da08ff81a7ba9b3f73bc7913fd9d8614
-
SHA512
a6347f620ecb04d762223d9b9db83ec9fa35b64de0b4d5b805db2017003b3a1b498385af954b3df7f100e535764508f18a2c6c70d1297e6bf9fe8f724697ada1
-
SSDEEP
24576:1wNEQmTVGSxpcjukL2CDYibq6/yqLNaF:1weQmTVGSxpcakLz0ibq6yqh
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 14bd8af6005d46f6e5baf19f17aae1da_JaffaCakes118
Files
-
14bd8af6005d46f6e5baf19f17aae1da_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE