Behavioral task
behavioral1
Sample
07cdb7968e94ff0be8b4af2c8eac3c72_JaffaCakes118.exe
Resource
win7-20240611-en
General
-
Target
07cdb7968e94ff0be8b4af2c8eac3c72_JaffaCakes118
-
Size
784KB
-
MD5
07cdb7968e94ff0be8b4af2c8eac3c72
-
SHA1
e1b9dc04307f3fc50f490713a4db3af2a82a78fe
-
SHA256
e7d0c8f95776d23a9aae78390de9c63fa53a5748453e45f039ee64886478168a
-
SHA512
5c0f12394f72acec5e8ea3c74f5c9a461a3ee4d974c926ab49d725b5b171a7d2e780babad2eaae0228b66ba3351d0639cb34c86858da36f92b7a1f9be5957577
-
SSDEEP
24576:ZegMEGQy7mYwzwRaQ3+2SD007Me/sO5r:ZiE327siaiGMekOl
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 07cdb7968e94ff0be8b4af2c8eac3c72_JaffaCakes118
Files
-
07cdb7968e94ff0be8b4af2c8eac3c72_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE