Behavioral task
behavioral1
Sample
181bf47e8cab7e66e6fc3b12c5cf0ea0_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
181bf47e8cab7e66e6fc3b12c5cf0ea0_JaffaCakes118
-
Size
79KB
-
MD5
181bf47e8cab7e66e6fc3b12c5cf0ea0
-
SHA1
c52a11e4fa4bbf1837a0c013ceee2f370b00d185
-
SHA256
0d8ac37a5c9793ee72a2919847f89b455874758521e7e3b6470713031adbf5d0
-
SHA512
8e16266b9afe5e7d73f13ef2f577cb573b7d83228e48d139e983f9a6ebf299f655fdcc5a937cbaed44a9de6297f4c098190182a33a26f13062b81873cb53135a
-
SSDEEP
1536:TBobKsrtO3YTSAoVRctdKQSY+A37feaCMJDmYsLIb4PvYqHB/AdGl:TBobViS1dhSDADeak7dJHB/AdGl
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 181bf47e8cab7e66e6fc3b12c5cf0ea0_JaffaCakes118
Files
-
181bf47e8cab7e66e6fc3b12c5cf0ea0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 47KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE