Behavioral task
behavioral1
Sample
232571bdd71687706c21a6dd7c1cb200_JaffaCakes118.exe
Resource
win7-20240611-en
General
-
Target
232571bdd71687706c21a6dd7c1cb200_JaffaCakes118
-
Size
784KB
-
MD5
232571bdd71687706c21a6dd7c1cb200
-
SHA1
98ca26434ca74b85c3c69cde5e45874065052550
-
SHA256
0ed46d9bd1e27462cf2a0f80ab10949ee7fb1af2691ec70dda02e4ae6960cc8f
-
SHA512
8a2dbdf74af1469353ab2338048b8ba340f3f06527d2e5b71336e33602cfd687e8683a4e649aafad0550721833dcead4e6982f88469d76863779a36371ee492a
-
SSDEEP
12288:qJy7y8LJ6QhLvolpnV7zQrfeSKMbJvmMgjkeZy91n4nJ1nlLsKkZfYIED+0gpMC:qE+C9voDVoFjmdjJZy9OnpsKMfY9+1z
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 232571bdd71687706c21a6dd7c1cb200_JaffaCakes118
Files
-
232571bdd71687706c21a6dd7c1cb200_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE