Behavioral task
behavioral1
Sample
1747ea7de788008e89f0eba30919db33_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
1747ea7de788008e89f0eba30919db33_JaffaCakes118
-
Size
143KB
-
MD5
1747ea7de788008e89f0eba30919db33
-
SHA1
87ebca775a4f54a38d7ca253a3e7dca1059189e4
-
SHA256
7b9f4a7a38b8faae783e579ce5fdb7717cff001dd18e3a2909078ef40a4617a6
-
SHA512
12ec3bb2cca0140bfe33ccbcbfef3b8c15b91659b2ba7ffd4424add76a33eb692cd26c3a22c1f09fe47052cf993777c215ffe2a03d95e302273dd198681b317d
-
SSDEEP
3072:kWNSP8uUdzh5vaBAzmeu2ZNhe9HOhIAsdxn6sM0TZMl9V:bNS0uUdzh5vaBAz5PDhIAsdxn6sM0TZ6
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1747ea7de788008e89f0eba30919db33_JaffaCakes118
Files
-
1747ea7de788008e89f0eba30919db33_JaffaCakes118.exe .js windows:4 windows x86 arch:x86 polyglot
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE