Behavioral task
behavioral1
Sample
7003ee6da6a57b85ea0d1669364fb0da_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
7003ee6da6a57b85ea0d1669364fb0da_JaffaCakes118
-
Size
424KB
-
MD5
7003ee6da6a57b85ea0d1669364fb0da
-
SHA1
41b111628947549adfa8995723b90d3250158e08
-
SHA256
9cb5de7265f58d8293225551c3ca54538707bd2d05a53d1b5f41e6461eb5eddf
-
SHA512
e26760c10b362eaa6128838656f8e74656dc1e16ee3447b7e604043fcafb734313b6aa83e4db581c4b1b0466ec2141d3a67d5ec8a3967077112d33cf75d74aed
-
SSDEEP
6144:5iYgmdAvuGVi8dLGRwEEXf6HVe+C5ZMDrIyPSngHEqMo/5X7hm3KMQilsW:fggAvu4iIgtEWjyZMvFSn+37YKZI
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7003ee6da6a57b85ea0d1669364fb0da_JaffaCakes118
Files
-
7003ee6da6a57b85ea0d1669364fb0da_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 260KB - Virtual size: 260KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 152KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE