Behavioral task
behavioral1
Sample
f607c30c95aa1dfa5edf2144f6a894b8_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
f607c30c95aa1dfa5edf2144f6a894b8_JaffaCakes118
-
Size
784KB
-
MD5
f607c30c95aa1dfa5edf2144f6a894b8
-
SHA1
67cf2a0faa78d2fa8d672e0e3ca20b7bf012d2d2
-
SHA256
710775641e8db4a24a742bb6d4d760b0a5350e7b9e5908dd4f833ca21a5ae571
-
SHA512
7172784a7a48ed561497adb458382831ed8d97422e68b3d017521949406ac79eba264f5d82f7a4ebb4fa953577a6363e79b2d642ee134947734e0a62406e69fc
-
SSDEEP
24576:39Nr9DULY++Wjrn5T6SafyrhvXstkYs+E2ps3:39Nr9Dmd+WjdPivRs+EMs
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f607c30c95aa1dfa5edf2144f6a894b8_JaffaCakes118
Files
-
f607c30c95aa1dfa5edf2144f6a894b8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE