Behavioral task
behavioral1
Sample
7db02d12a8718c6cfe52a853872f8aab_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
7db02d12a8718c6cfe52a853872f8aab_JaffaCakes118
-
Size
6.6MB
-
MD5
7db02d12a8718c6cfe52a853872f8aab
-
SHA1
21b6792726035dee46dfcaeb44258169c57699da
-
SHA256
40d4a42f8d9a39dbebaeaceb7786bd78f225ca728653c230341a99eb1754f276
-
SHA512
b821e06e8738df81642593fb20752e5566962777a02902450efd408fab97460edc3a52cbefdfa3fd55d20a89b859f31009079851a312493264e87fe4513ba2cb
-
SSDEEP
196608:WpGu/lIOltK5wslSljZ5BArz5LltH04w1XHXrl+9a9I:Vu/lXkwSSld505Lcz1XHXh+Y9I
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7db02d12a8718c6cfe52a853872f8aab_JaffaCakes118
Files
-
7db02d12a8718c6cfe52a853872f8aab_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 10.8MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 6.1MB - Virtual size: 6.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 511KB - Virtual size: 512KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE