Behavioral task
behavioral1
Sample
70acf6a54a7e1d9884b12a23f00a5500_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
70acf6a54a7e1d9884b12a23f00a5500_JaffaCakes118
-
Size
109KB
-
MD5
70acf6a54a7e1d9884b12a23f00a5500
-
SHA1
6f1370c1997d68cdc73639419042f9944555a40f
-
SHA256
d352bc4dc358eb0aa3b98e30129cf6d21113bb73ea2f40a41bcf57ef4cc29782
-
SHA512
c5fb4d69d98ab819160326b28ed6e8a1142d91ec54accaad5d0da55b8b95b34558d1fa02f61d3050160880e87ff9dc55639d9cb719f65116db223115b6d6363e
-
SSDEEP
3072:TeovXPoYcswp7Uclw3BwQaq9NUiuvWwNACeFxout:KovQYjwpU8OB3aq7avWwWCeDoS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 70acf6a54a7e1d9884b12a23f00a5500_JaffaCakes118
Files
-
70acf6a54a7e1d9884b12a23f00a5500_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 204KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 106KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE