Behavioral task
behavioral1
Sample
700c724b7b820f2528b3788bbb62075f_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
700c724b7b820f2528b3788bbb62075f_JaffaCakes118
-
Size
108KB
-
MD5
700c724b7b820f2528b3788bbb62075f
-
SHA1
9297db6c656da2e92e9665101b39508d2031a326
-
SHA256
20dcd173656541530acef8957ada3ecd93e75fc8c308faee004727f199da7b77
-
SHA512
2338f194d617eadbdd191a5c42910ccbb7cd135c5e30082dafa5290121eb8181a03b89c1d904401b299d96445a8d3c6b22f13700b40723b43ace80534bcd12f4
-
SSDEEP
3072:xXx6KLbZd/NzUPoU6xyLc0A4vMIgfy4Gy6xloXaDfK8klcGoutdfOc:xXMmzUP+ywoAvGy6pJklcGoSp/
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 700c724b7b820f2528b3788bbb62075f_JaffaCakes118
Files
-
700c724b7b820f2528b3788bbb62075f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_SYSTEM
Sections
UPX0 Size: - Virtual size: 92KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 103KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE