Behavioral task
behavioral1
Sample
66a55a996bcd2df0974701800e27d5f0_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
66a55a996bcd2df0974701800e27d5f0_JaffaCakes118
-
Size
253KB
-
MD5
66a55a996bcd2df0974701800e27d5f0
-
SHA1
3ad4e6be333203be9a3425aab0caf4fdbd674150
-
SHA256
3670ce6500db4243dc0acfe8f32458d4411753cd4375b1028ea4f3a4274bf1b9
-
SHA512
3231c914f58b54bc34b42a731220865b6807719371daa837b628940214b07d1240e1f2dfbdf7bb16625e292fcc4a1987a35772ffb2b10864ffd4604862ecbbd1
-
SSDEEP
6144:5BJVqu5jxRl+t6Ge0qw0kw9+Ks9a8/7z6l:5tqwjxRl+t6GfL7z
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 66a55a996bcd2df0974701800e27d5f0_JaffaCakes118
Files
-
66a55a996bcd2df0974701800e27d5f0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 488KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 248KB - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE