Behavioral task
behavioral1
Sample
54e2f40aa976ecac3d7d07952f920287_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
54e2f40aa976ecac3d7d07952f920287_JaffaCakes118
-
Size
2.9MB
-
MD5
54e2f40aa976ecac3d7d07952f920287
-
SHA1
92116f92ad56aee26aeafb9a3550f9c23439986e
-
SHA256
15a4ad552f0b6f789af762ead7407e88d6a3e1272384f2f197366780f6dc12d3
-
SHA512
7c6921cf7748727dab6026f884520d0f6ef26964a4460cab9129703524d63a00f4360b854d943551d02bd22a5c45086a5b0cd736a5bb051d722220052b65921f
-
SSDEEP
49152:GSXdTcNwKsb1iFSt9kg/P4M338dB2IBlGuuDVUsdxxjeQZwxPYRKs:7pSwKsb1iFSt9kygg3gnl/IVUs1jePs
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 54e2f40aa976ecac3d7d07952f920287_JaffaCakes118
Files
-
54e2f40aa976ecac3d7d07952f920287_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE