Behavioral task
behavioral1
Sample
562ff386c1c02947a3f0d0f875b3ab75_JaffaCakes118.exe
Resource
win7-20241010-en
General
-
Target
562ff386c1c02947a3f0d0f875b3ab75_JaffaCakes118
-
Size
2.6MB
-
MD5
562ff386c1c02947a3f0d0f875b3ab75
-
SHA1
f7fcccf85d6038c13572b5c74b6345772152c6bd
-
SHA256
3247228e60f9a0448fb5a8238b16e35a7b61bf40de6aa88b603f703f175fe48b
-
SHA512
79e45ddd947561b831f5a7cfe7d2ebed6199daa6b8d51b1f198f68284678f6ed5f983730988062ae90f18e0f19e206b9ded25e6c0f6a6c7611674f7241bfa6f6
-
SSDEEP
49152:Dag25i6SV6XTsn6GOfpzhaI0qlk3pRzHfF76Lay3:+5KAOOJ8quEz3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 562ff386c1c02947a3f0d0f875b3ab75_JaffaCakes118
Files
-
562ff386c1c02947a3f0d0f875b3ab75_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE