Behavioral task
behavioral1
Sample
310faaeb8031ecdd06ee6fffb956279e_JaffaCakes118.exe
Resource
win7-20241010-en
General
-
Target
310faaeb8031ecdd06ee6fffb956279e_JaffaCakes118
-
Size
113KB
-
MD5
310faaeb8031ecdd06ee6fffb956279e
-
SHA1
4da710f968a061143673e2ff0acd775b86ce6a6d
-
SHA256
abe1627c6e12c4f6f4980b9e313bf136c05b56e9e2430bea5a0e6634455652be
-
SHA512
7003bee2ca8db68fac46c25e58304f7e0c91e0b979cb6247f64ef4edc11d39c0d7c22f71e93ba689207a09fb79df3475e7153b900af6467ca86f8ea27bf24844
-
SSDEEP
3072:ceZsQy9EvI2sRN8P4aVZ4/jwtqw7c87aTfmKkRoutV:cQy9+icnVZkj8q8Qf50oS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 310faaeb8031ecdd06ee6fffb956279e_JaffaCakes118
Files
-
310faaeb8031ecdd06ee6fffb956279e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1000KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 109KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE