Behavioral task
behavioral1
Sample
4614da8ca12a8d41c8e3737c74e3c1df_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
4614da8ca12a8d41c8e3737c74e3c1df_JaffaCakes118
-
Size
68KB
-
MD5
4614da8ca12a8d41c8e3737c74e3c1df
-
SHA1
5ad04bc3540ba8ed5ec17070ca29d3b9bd316062
-
SHA256
df031ffdf39a65ad30332a0ed9ba06b51fb40ac240bfd2ee3bffbd83e6aa46a5
-
SHA512
030cdd6ca277596a418f7dbb8fbcdf8fbf08bfa160cf1ea94d4a5890f3343f14ae1b5c0e1a7ab11944d1faf34558f7d84f62594844eccfb6c8b4913405cf89aa
-
SSDEEP
768:NzTYAE05KddBjBy8dHOf/l8z2QbjuOv/CVVRq3CxqGgLXl2Oan9WCDr/OvVnG:qdBj7pO3l8SQbjb3C3Rq4gIYUOlG
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4614da8ca12a8d41c8e3737c74e3c1df_JaffaCakes118
Files
-
4614da8ca12a8d41c8e3737c74e3c1df_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE