Behavioral task
behavioral1
Sample
69bfbf435bb3a061139d55595897f532_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
69bfbf435bb3a061139d55595897f532_JaffaCakes118
-
Size
784KB
-
MD5
69bfbf435bb3a061139d55595897f532
-
SHA1
036db7c76ad0e1e4899d4038edebd9b1933db389
-
SHA256
ef250e6fdce9eabb99c229adac217bb656bf46395e8f2266c8e9778ba127aa20
-
SHA512
268dba97446472f27e193cc57e48826e81bf4df61020d67f04e5777a22254a13d70282a63119b8b880266719e2d45d9cf950623642189e52aa4380040a28b443
-
SSDEEP
12288:7g+QrSIqYd5NK0TYQJuWQEej1dK7XfnRpaHmMY0qU5dJ3J1CH7x:0gkkjcrz4mMuCS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 69bfbf435bb3a061139d55595897f532_JaffaCakes118
Files
-
69bfbf435bb3a061139d55595897f532_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE