Behavioral task
behavioral1
Sample
ce765b0d5e465f91056be8a38a734d78_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
ce765b0d5e465f91056be8a38a734d78_JaffaCakes118
-
Size
784KB
-
MD5
ce765b0d5e465f91056be8a38a734d78
-
SHA1
40767c810eeb7c3b8e7102a447992b7e560e41d2
-
SHA256
50abf8082adfe2f73dd86c869b2e3227eb289451e4ba201e6db36d710e8be6e5
-
SHA512
e5260bc295d3a26e09359d0390c96585e9e588ea4ae922e811ef5d838fa3010b92fc175831ecaf8ef841f61c1ba33b488f053542b1cf09a0052ea1572e7a7fbd
-
SSDEEP
24576:xXJmP7sBPlRlpocZmCuOGMWrNvkl5V8rWKrD:9JyQBtRl6cbRWrNvk1
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ce765b0d5e465f91056be8a38a734d78_JaffaCakes118
Files
-
ce765b0d5e465f91056be8a38a734d78_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE