Behavioral task
behavioral1
Sample
741598c8ca33c637e54a65814b6485f2_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
741598c8ca33c637e54a65814b6485f2_JaffaCakes118
-
Size
4.7MB
-
MD5
741598c8ca33c637e54a65814b6485f2
-
SHA1
1e17f6f332dd32f6d4c7bd063afcd82244533efe
-
SHA256
ad6321a85dd85148bceeec918dd675888a0a64d40f9d0562820a2e3d96e5b377
-
SHA512
726af86cd53ded7b9ab2bcf6b2d97f4c7e559c3c77f776af2ba231aee15564a7d1dc01bcb7abc296579959e34250982c1dbe723bf338d113d1829aace3d4416b
-
SSDEEP
98304:FkBgrxEvbBOhKZNKXPgIy9juZsNdFo/lRVke56cbbpULLSS:FkPvbFZoXPAduA3o9RVX56qbmCS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 741598c8ca33c637e54a65814b6485f2_JaffaCakes118
Files
-
741598c8ca33c637e54a65814b6485f2_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 9.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4.2MB - Virtual size: 4.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 505KB - Virtual size: 508KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE