Behavioral task
behavioral1
Sample
704faf93df61fff2ab76ae2ad14268b5_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
704faf93df61fff2ab76ae2ad14268b5_JaffaCakes118
-
Size
784KB
-
MD5
704faf93df61fff2ab76ae2ad14268b5
-
SHA1
dcb0645ffd68cc8e678a2e175a0449e9bde80300
-
SHA256
db374d969e5e3ffbce93cba06d2c7b08ffddd8f089572e0c65c26c8c8b67ef6c
-
SHA512
ff910be5b3d44800677133730bada5476baa3538dc282d94796611da841bbd7fb3f230815cb2e32b08ab72b5cf7d218bf0d58dd7c8481da0e7efd55c14684dc1
-
SSDEEP
12288:/bsIGW9efyy46Dzjmew6TqIVFa0CoOPHo6X8VKIW2nnU9SaO9lKK2OB5ylCxhgKU:/bVeqyD5o0EPI6XqKInU9euK2JIxhg7
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 704faf93df61fff2ab76ae2ad14268b5_JaffaCakes118
Files
-
704faf93df61fff2ab76ae2ad14268b5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE