Behavioral task
behavioral1
Sample
f967b55a2377b4ba8d6b04a7ceb5e1d6_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
f967b55a2377b4ba8d6b04a7ceb5e1d6_JaffaCakes118
-
Size
784KB
-
MD5
f967b55a2377b4ba8d6b04a7ceb5e1d6
-
SHA1
fa034a2c1335c5315a986a4ade04e3392aab4d66
-
SHA256
26e5053723d42053f67690736cc481ee9f53865cf8f11bc50a585cfc8b175fbd
-
SHA512
4a3d68fe70e8a75bd321a5c188c581b1f4ed9c9413c5873e60fc57e971c0a0c690f2b18779757f3495242123b0f5cd078d1922f795bff957c4098288128e94f6
-
SSDEEP
12288:u5wL/E/60ZujprgscgLyFkrQBV9JV9U3tT9Mgvu0l1wQSh/SqOfLPodt39kXIe8Z:K9EVnmqevNU3h5u0l1wQsKqOAZeIh
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f967b55a2377b4ba8d6b04a7ceb5e1d6_JaffaCakes118
Files
-
f967b55a2377b4ba8d6b04a7ceb5e1d6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE