Behavioral task
behavioral1
Sample
385a54ee775443ad5115f89d7f495898_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
385a54ee775443ad5115f89d7f495898_JaffaCakes118
-
Size
114KB
-
MD5
385a54ee775443ad5115f89d7f495898
-
SHA1
fe423fa9f9020c5b07ff7404ac5ce07dd2bd2c3f
-
SHA256
dd452e9b0e2f6f2974bc3c7b38c107f484a4b2976525fe50a15b15f07148caae
-
SHA512
27544eb9bf5c394d2eff116661b47554eb0db6ec6578f7e0f343683923d6b7d2b65ac2cd54ffcce414dd8e73bf48a7f46a0b48919289eae61a7f51ffd9e3b04c
-
SSDEEP
3072:bblhrkb4Gu+OFiItsnB2wKO9GSnJPLrTtlK8:bblh1x2IiBp39GSnJfT
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 385a54ee775443ad5115f89d7f495898_JaffaCakes118
Files
-
385a54ee775443ad5115f89d7f495898_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 200KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 108KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nah Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE