Behavioral task
behavioral1
Sample
705cca6f5b870d2c613193504ab41d6e_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
705cca6f5b870d2c613193504ab41d6e_JaffaCakes118
-
Size
198KB
-
MD5
705cca6f5b870d2c613193504ab41d6e
-
SHA1
07e2f025f05c485d900d6f137be8fe3b721a86aa
-
SHA256
4964c8e8b79aa2ed68fd24f6a257a65a6a042c2297d5393fd8cf5ba67ecba671
-
SHA512
bfa11a759ca38c9f484915a010a1fa3081cd7b3cd6c0d5a9b84849521de9d469e04a8fde67eb2442d97437715cb763a1b798dd2a8b367c4efe266d3b418765ab
-
SSDEEP
3072:ROoJN5FjcMFB3cU1X2niGdT8pEZ8Re1pq4+uJjnq2y0:RhN7990dn7JjA
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 705cca6f5b870d2c613193504ab41d6e_JaffaCakes118
Files
-
705cca6f5b870d2c613193504ab41d6e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 124KB - Virtual size: 124KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 66KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE