Behavioral task
behavioral1
Sample
37188cea0be338a24cf57aef545bef56_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
37188cea0be338a24cf57aef545bef56_JaffaCakes118
-
Size
12.0MB
-
MD5
37188cea0be338a24cf57aef545bef56
-
SHA1
8445d02729483dc570c101a516d22e100623819e
-
SHA256
d61847e2faf385ddee6d1bd29a024c43d90588b530ece1378f4248030d05cf71
-
SHA512
71358dcf931d413d67804b25ca7727eac0eade980c846fe73aa554b589557d913b32965a8b21a522c71b77d8ca68b7ba8e56a0788c876750ab446bc7b8a6e79f
-
SSDEEP
196608:YON4NgIdDuOqd/EID+FASdDuOqdvBPLdDuOqd/EID+FASdDuOqdOikCdDuOqd/EO:YON2gRn+CZBPcn+Cgien+CZBPcn+CK
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 37188cea0be338a24cf57aef545bef56_JaffaCakes118
Files
-
37188cea0be338a24cf57aef545bef56_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE