Behavioral task
behavioral1
Sample
376317316b253482fdf7e54ae9db2f93_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
376317316b253482fdf7e54ae9db2f93_JaffaCakes118
-
Size
606KB
-
MD5
376317316b253482fdf7e54ae9db2f93
-
SHA1
574559b45ee55152cfca19e48e53281f2da6db90
-
SHA256
e90b6c32af799b590dc7894f0cf27586e511ad5758fc4e59737ece3713f41bd6
-
SHA512
2a8d231f8520d24738e0c16d5b0a1957940062148e9d1239f4be06b92bcb4441a14aa9ee3557eafdf8659b4766865ce4dc34f9afa8b1efeb80187bb5fbe3208b
-
SSDEEP
12288:DIbw3mMx2SSgczo+xyRBCBeZxgCsy696/0uLmhuMIYJiz+nLpu:DIU3FxNSVzo+xa4By691hLOgNu
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 376317316b253482fdf7e54ae9db2f93_JaffaCakes118
Files
-
376317316b253482fdf7e54ae9db2f93_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 884KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 591KB - Virtual size: 592KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE