Behavioral task
behavioral1
Sample
78bb5b3ea32ef634e5519954cf7c3d14_JaffaCakes118.exe
Resource
win7-20240508-en
General
-
Target
78bb5b3ea32ef634e5519954cf7c3d14_JaffaCakes118
-
Size
7.1MB
-
MD5
78bb5b3ea32ef634e5519954cf7c3d14
-
SHA1
e1bf13123c36b384fb481255bcc9466d1a8178bf
-
SHA256
0e30e6e05775371c43f18848bf453f665b4af8e93012c6d610b688e4d7c61b88
-
SHA512
be034e5e11e30dc9b9998ddc30f04894833ee8fd61205e1901c640dcc8b079ec63b658e45351eb6cb52d41844383953741939fdf514ca98838a3aed3f0a98a7b
-
SSDEEP
196608:Me6P9aFJFoPveiLSEVXSa+V6WlTUXHjW1:Me6PsFJF07LSE19+V65XDW1
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 78bb5b3ea32ef634e5519954cf7c3d14_JaffaCakes118
Files
-
78bb5b3ea32ef634e5519954cf7c3d14_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 12.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 6.6MB - Virtual size: 6.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 513KB - Virtual size: 516KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE