Behavioral task
behavioral1
Sample
574079e6bd00a6c4cfe655a10ca3ad29_JaffaCakes118.exe
Resource
win7-20241010-en
General
-
Target
574079e6bd00a6c4cfe655a10ca3ad29_JaffaCakes118
-
Size
2.6MB
-
MD5
574079e6bd00a6c4cfe655a10ca3ad29
-
SHA1
76b384c1699d5d17b63d3f982bfcb287d1aa6283
-
SHA256
dac7246bf5bd5f52cbc079b7ad21fbf4aaa2854aea9f6ef9da0006acc6731273
-
SHA512
d1d3167c28b540dc37a726fa08285c3214a8ed340a58ca507b4c8480ec27141d462e1c0aae6941426dd49d02bad3bd92b3dd58dbec42f06d78c2348dd5237836
-
SSDEEP
49152:ran4o8Si3tCB9tas2UQ5SMPvx4uKKhYay3:Oh8UyPvyVKC3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 574079e6bd00a6c4cfe655a10ca3ad29_JaffaCakes118
Files
-
574079e6bd00a6c4cfe655a10ca3ad29_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE