Behavioral task
behavioral1
Sample
4790b97d1611c21eb417a9c21b8460d4_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
4790b97d1611c21eb417a9c21b8460d4_JaffaCakes118
-
Size
784KB
-
MD5
4790b97d1611c21eb417a9c21b8460d4
-
SHA1
616bb8adf981febf7e0c50bfe200893abc919e7a
-
SHA256
6cb657a7757404bd496250f2c57e4a3ce80f8cf854e15bcdead3d273895eee34
-
SHA512
412b05623b7868b7e7a0f236c0dce505ca9332c7ff0e85df0bfed29558b9e20f7644547bbd99bb894a57ef046f379ab1d409246093bcf51ceb2f176b8e954654
-
SSDEEP
24576:zN8amEewG0Ky+bK44VGbZK3/AVwcDN7W:zNnm4G06bnUG43/WwYNq
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4790b97d1611c21eb417a9c21b8460d4_JaffaCakes118
Files
-
4790b97d1611c21eb417a9c21b8460d4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE