Behavioral task
behavioral1
Sample
44f086681e7ea7349d15150173e5cb01_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
44f086681e7ea7349d15150173e5cb01_JaffaCakes118
-
Size
7.1MB
-
MD5
44f086681e7ea7349d15150173e5cb01
-
SHA1
fb10e0ef35926c8a922a7cf16c659d19f8f10312
-
SHA256
817fadbd334a7c67cbd0fb70e2966eff00b9338a57542c7f3cdc4561f1ef93c1
-
SHA512
bbfd9721afd6f817561041d01ee00d1ed26fa7a08fd8f0a13aea6f3b4e43ce27fb7e38aa25c0e65e932e58fff2bf43d027360d47f87df6cf5bd53f84c57b5d97
-
SSDEEP
196608:Me6P9aFJFoPveiLSEVXSa+V6WlTUXHjWk:Me6PsFJF07LSE19+V65XDWk
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 44f086681e7ea7349d15150173e5cb01_JaffaCakes118
Files
-
44f086681e7ea7349d15150173e5cb01_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 12.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 6.6MB - Virtual size: 6.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 513KB - Virtual size: 516KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE