Behavioral task
behavioral1
Sample
71a11b148ddf99d8be5284c52e6bf994_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
71a11b148ddf99d8be5284c52e6bf994_JaffaCakes118
-
Size
16KB
-
MD5
71a11b148ddf99d8be5284c52e6bf994
-
SHA1
f38b1c29d04c9de133740d75496386fe08590ac8
-
SHA256
f9adcb6035ae920f63ceb9475b9085ab39ce8c921a6e7e447a8c4fd0e863306b
-
SHA512
0116c16ffca914dc1b5d196b19b7de03af8a184c711229c30c50b3101ff74954eb99319260ed7e1bd54eb0be0dda5099ef7a62726dde3f745792f95379ed9c08
-
SSDEEP
192:eZFypphzLbFG6qfTq88LSenZzdeUsHx8QrRaTJzFHPg6pENw:+yppRbFGP+vSeZReUm8jvg6pp
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 71a11b148ddf99d8be5284c52e6bf994_JaffaCakes118
Files
-
71a11b148ddf99d8be5284c52e6bf994_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE