Behavioral task
behavioral1
Sample
34d8534ffc25505e359c9b0b9a67f913_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
34d8534ffc25505e359c9b0b9a67f913_JaffaCakes118
-
Size
784KB
-
MD5
34d8534ffc25505e359c9b0b9a67f913
-
SHA1
c6352ba0bf0a09467407eb96a5b83971e2aa54cb
-
SHA256
773ad11166f695c5eb2afaa7dbf055a98dc950526e1e8be7c2d31c841ecf4518
-
SHA512
05a6c13d0a53b5272eb764c7e2d21f85f20b75130d9886d3cf54b3a0f31cbb7d2278962add1d23763f5cdd07c25702200c216b11f49d790acfa1925a8d4442e7
-
SSDEEP
24576:sM/aJ1Bh5K+EaWPrC3pqeY9WUT21yI9Szs3jXtYAO3:sM/oksWWDYYUT21Ys3jtO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 34d8534ffc25505e359c9b0b9a67f913_JaffaCakes118
Files
-
34d8534ffc25505e359c9b0b9a67f913_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE