Behavioral task
behavioral1
Sample
66efbd798ba4bb47a47bfa1d75479d61_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
66efbd798ba4bb47a47bfa1d75479d61_JaffaCakes118
-
Size
784KB
-
MD5
66efbd798ba4bb47a47bfa1d75479d61
-
SHA1
316e4e1e18c9096aed20dfde8417493920108e1a
-
SHA256
6a477468a3a1a919fa844d87b9d694f41adaa21db6699867dae39d642364eb6b
-
SHA512
0051359c48578dbac7b2dd56cf4d08387c8438b902f3ff8a5b8e8bac88c6b42ccba80a6d0b37a9eaf90dde7dc9b9b614ff3628d97edb575797505b119e9eca93
-
SSDEEP
12288:5SYhT2z0PHcyMCxD9EhEEJmIpDNsvxOEeV5XZWcBXSxk+LFfva:phTIOHcyTxChEENGxD6SuAZ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 66efbd798ba4bb47a47bfa1d75479d61_JaffaCakes118
Files
-
66efbd798ba4bb47a47bfa1d75479d61_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE