Behavioral task
behavioral1
Sample
70415a94288f30c310a4a4c835a6210b_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
70415a94288f30c310a4a4c835a6210b_JaffaCakes118
-
Size
290KB
-
MD5
70415a94288f30c310a4a4c835a6210b
-
SHA1
000124dd66a38d4d88f0cb7d3b97e75c59b29344
-
SHA256
8916d4d2c44609da17e75e5e44b81920e909405b41134950be749efe9cda8fd1
-
SHA512
b607dbe4bb673d86b583218199fc324cf73c6a4da3582ece84b2f2fa41491a7d112fde5566ac0f24057cd542a675195882427a675b37248b3e98f776d36c1eb6
-
SSDEEP
3072:83KlPxrDLK7pWrgAIC8xGduITkzm6Q046Mmqjmzfgq7:lOWtI5xGdqzMn6gq
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 70415a94288f30c310a4a4c835a6210b_JaffaCakes118
Files
-
70415a94288f30c310a4a4c835a6210b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 184KB - Virtual size: 184KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 101KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE