Behavioral task
behavioral1
Sample
70294789b7707965ad5a6f425405939c_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
70294789b7707965ad5a6f425405939c_JaffaCakes118
-
Size
296KB
-
MD5
70294789b7707965ad5a6f425405939c
-
SHA1
5d52ff5ece8ecc66f957c711150cdc19831c22fa
-
SHA256
c90159e02b038e0f12e19440a8652fc00c97e7a90f96aa9ebd26ed05ffaad8b2
-
SHA512
80f729063d0f31c5e3737830e2558bbe4065b2dde402f1ae28c1113659a932e7eec0b1c51d12bb49b69bfa27d11480759907a8f0e177a4af30f9aead6c50c9c5
-
SSDEEP
6144:xvWCo27XKrNz92aIP4KHeJpgmIcYdX6nnHMwbPPFb9VnyeR7ZCYqkw:xvvd7iZ2a1SeJzIcYgnswzPF3rl4ww
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 70294789b7707965ad5a6f425405939c_JaffaCakes118
Files
-
70294789b7707965ad5a6f425405939c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 96KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 276KB - Virtual size: 276KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
?? Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE