Behavioral task
behavioral1
Sample
70664882308e063436b5be120109eef6_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
70664882308e063436b5be120109eef6_JaffaCakes118
-
Size
784KB
-
MD5
70664882308e063436b5be120109eef6
-
SHA1
706dec265dfca1c18d51edf4b70ae2b84c8fa6fb
-
SHA256
2ff16277811145858d830c9573681cbae9daa88e1aca5bbb3b042e24209c9f4f
-
SHA512
6542df96e520814e8e463fb803c6fe56ba2398499e03c0af67add3455c33e0c28c101f79d0cea0ab47de79a27fdd4a6c7105b6f5f4d0eb9b5e1f8204a7bd87ef
-
SSDEEP
12288:wo8amRxJLqsOE2blVVe66hc75zYoDWGlhsW9neL5VBdB6r0mgmT4fle/H3j0d7YE:wBqsfyfe66hQzYit+O65z6k1FY
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 70664882308e063436b5be120109eef6_JaffaCakes118
Files
-
70664882308e063436b5be120109eef6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE