Behavioral task
behavioral1
Sample
719eea974b72a06df1b68732def31b20_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
719eea974b72a06df1b68732def31b20_JaffaCakes118
-
Size
97KB
-
MD5
719eea974b72a06df1b68732def31b20
-
SHA1
138213cd614b8617d4a62c5231769b7a7ecd982e
-
SHA256
8a03c933496e35b9d52d5268e3c34a7e4c90d1f75aab3d871bbc6f47ee67c695
-
SHA512
b8d27536e483137a8434f14c1294441ec1b51b66d5c1ccc7c7c5c81f07032cbe83c4298c0b17614764b1d1c102cdb4c9d77aa8734a260d2878e44ad0c021b51a
-
SSDEEP
768:9UTtMsuNPoZefhKWD1BP/LTEWARCaa4TazCgxNdjt2ei7QX83jdCURgin:9UpfSPo4nZd/mRjuzvNZt2e8QMBzn
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 719eea974b72a06df1b68732def31b20_JaffaCakes118
Files
-
719eea974b72a06df1b68732def31b20_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE