Behavioral task
behavioral1
Sample
64dc027138c3f0dc37f29da97471bd7f_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
64dc027138c3f0dc37f29da97471bd7f_JaffaCakes118
-
Size
143KB
-
MD5
64dc027138c3f0dc37f29da97471bd7f
-
SHA1
7cb2518d55972fc528bf7508a8bc28736c065a4f
-
SHA256
fd69423eee86c0951c850acbf4df90714b236bae6f93cdce07a618fc23ab69c9
-
SHA512
98076d112284301ef5280046298d60e90d499eb68ec4d945939a89194e70d24e10e76aabb703a8ebc659d9856566381ab1d4ad813c67b3c8de189d9238f63b05
-
SSDEEP
3072:h7zuo5R0cZiKwbHs89jr+3FwIdkVBMSuDl6QHeout:h7ZwKwbMcAFxdkVBikceoS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 64dc027138c3f0dc37f29da97471bd7f_JaffaCakes118
Files
-
64dc027138c3f0dc37f29da97471bd7f_JaffaCakes118.exe .ps1 windows:4 windows x86 arch:x86 polyglot
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 268KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 137KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE