Behavioral task
behavioral1
Sample
71c35a1ed9d815bc1f2dab2cf3430220_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
71c35a1ed9d815bc1f2dab2cf3430220_JaffaCakes118
-
Size
1.2MB
-
MD5
71c35a1ed9d815bc1f2dab2cf3430220
-
SHA1
5a7af47fff8d6787db88fa3fabe174e99e61c4c7
-
SHA256
eefd03671e1d11222288193ac4d9e770929fcacdbe71dc4075b0103bf4fae2f3
-
SHA512
da8cfd2efd5ea2d127e899f9e6b3c0fb90fbf8a1c2971dae2c2077c81e37160682d63773710962beab75c0f595d862e448c1333670c1312b0c5073df265e177e
-
SSDEEP
24576:qPpWZe202cpxgp8jO4SABG4pKICwugEJ9QP:qPJ2Ag5rwugO9u
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 71c35a1ed9d815bc1f2dab2cf3430220_JaffaCakes118
Files
-
71c35a1ed9d815bc1f2dab2cf3430220_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 900KB - Virtual size: 900KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX3 Size: 304KB - Virtual size: 304KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ