Behavioral task
behavioral1
Sample
7deeb57722ea5d2929cb84e04988d0b1_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
7deeb57722ea5d2929cb84e04988d0b1_JaffaCakes118
-
Size
4.5MB
-
MD5
7deeb57722ea5d2929cb84e04988d0b1
-
SHA1
a75f84504e16d1355456d08ceafcd104f125055d
-
SHA256
fbca0fc048a505abc3a0f452c3b89c62aad83fb8e2c16eddc9642ce6bd11db14
-
SHA512
88600ae3a9e455ac8b9f36b9236cf8f023914363affeeff585c0f1ecad44a98447a56cb41bff85562365292711cb159dfecd1510dd849260a74fb470c1b1ec31
-
SSDEEP
98304:brEIOWdgFzJitZRUKkGL1L4vOYKd389SneGd+wMjZI+:brEnWdgBwszGhL4vODgSneGt+
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7deeb57722ea5d2929cb84e04988d0b1_JaffaCakes118
Files
-
7deeb57722ea5d2929cb84e04988d0b1_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 9.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4.0MB - Virtual size: 4.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 508KB - Virtual size: 508KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE