Behavioral task
behavioral1
Sample
71c62ba7970279d3231fcd2da3d50d0e_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
71c62ba7970279d3231fcd2da3d50d0e_JaffaCakes118
-
Size
122KB
-
MD5
71c62ba7970279d3231fcd2da3d50d0e
-
SHA1
40e1d3622c479d9a706adb5b1e04efaebe970024
-
SHA256
477ee5d18facf56b4a14ba576db7dd6311111578e7a2ec8f016a05273301d2ae
-
SHA512
1b1f3574c7208fab21ee6b9be937bdff8e27326440cd7f12b2d25e3ac8bf08ad342b83a96f8606f570ec98cb0fce0fdefd95de15555f9e9d6f225dd221851464
-
SSDEEP
3072:ClRFxfy3+cSWFueAPgEwkAEX8Tdur8fPkx5kEikSDAouti:CvWTSPoEwkAnTw4fY7ikScoS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 71c62ba7970279d3231fcd2da3d50d0e_JaffaCakes118
Files
-
71c62ba7970279d3231fcd2da3d50d0e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 160KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 120KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE