Behavioral task
behavioral1
Sample
71bae4635f5ac25102d3d3560729745e_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
71bae4635f5ac25102d3d3560729745e_JaffaCakes118
-
Size
170KB
-
MD5
71bae4635f5ac25102d3d3560729745e
-
SHA1
df0cb94996c78d720a9c3626440c3a712e5fcda1
-
SHA256
c19d2b8a3c7e7bad61d8e703864b3508b2b584ad3e7184c01f164b63eeb3aecc
-
SHA512
53f537a33de1a2d59b8330a6f821d66f26b5da8b669b81243908970e641c630c15fd2d3c03c05d60a51acaefe078edfa8d80f5f2bf2868bbe3aefb294fd05283
-
SSDEEP
3072:nYrDm57wriTa7gUa5wueAR77VP0eo2gpi5tY41CZ:n/w0CQFeS77R0ri5tYF
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 71bae4635f5ac25102d3d3560729745e_JaffaCakes118
Files
-
71bae4635f5ac25102d3d3560729745e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 69KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE