Behavioral task
behavioral1
Sample
71948200fcfd3c68a071423c6d5c90b2_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
71948200fcfd3c68a071423c6d5c90b2_JaffaCakes118
-
Size
321KB
-
MD5
71948200fcfd3c68a071423c6d5c90b2
-
SHA1
55a1680e1f2bce7d02a6ac8e8e06c0b34304e973
-
SHA256
10808fdf25d18db92936d8ef8fe8699f54268a940342e42e461efbdb36acb4ac
-
SHA512
effeae68e82f0e1d5ac54c66063ea7ee6c9976dd359548ecf438e59ad92451b2e171b42984f8d30521e7e97657af562aa23ed50b5b7e36e6306a6945eea9a5da
-
SSDEEP
6144:DDbTdGYUgu/nYtp6NnsIXVi0JbCs6dxpeTXZW+FTTNgCFTMeM++eB:D3XUDvg6HA036pCXZW6NgcQv+HB
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 71948200fcfd3c68a071423c6d5c90b2_JaffaCakes118
Files
-
71948200fcfd3c68a071423c6d5c90b2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 204KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 53KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pebundle Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pebundle Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pebundle Size: 222KB - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pebundle Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE