Behavioral task
behavioral1
Sample
257778c3c9451826fdab71b50e9e9618_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
257778c3c9451826fdab71b50e9e9618_JaffaCakes118
-
Size
467KB
-
MD5
257778c3c9451826fdab71b50e9e9618
-
SHA1
371ba63bbf760ad98964865c4d68fbf0c444b34f
-
SHA256
b4dc628ddd05be838af7c558e3cee72999613f3d0684484b46459aee53993fef
-
SHA512
1bc8608e18e621261eca419b43660e11c955af8c76938191ec2d3f8abf897a0e9f6ac014fc711928266c606833d837f2afdc0322703fa73982183e5f1fba3790
-
SSDEEP
12288:BlXfXJZ5Jjy5mJDGZQ8TFs5hOTgIQHvu:OMpGZQis/IGu
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 257778c3c9451826fdab71b50e9e9618_JaffaCakes118
Files
-
257778c3c9451826fdab71b50e9e9618_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 296KB - Virtual size: 296KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 127KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 42KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE