Behavioral task
behavioral1
Sample
70b1378897a59d926532c08b8aee7033_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
70b1378897a59d926532c08b8aee7033_JaffaCakes118
-
Size
287KB
-
MD5
70b1378897a59d926532c08b8aee7033
-
SHA1
7dcc34a2e5cd475fc5cc68c46b0072ea389f7837
-
SHA256
c2d2d23236a8bae4796ceadffce28baaeca94bb50093c729ed65979ae28b38ca
-
SHA512
d02f62592c7d28abe8ad8fb1d680a16c0261774c16ba2452c219d8c46c960fdf6cfbcb6fb8541f68be00ba258bd5c5a4adf61ea390a631e9cd1180223145765f
-
SSDEEP
3072:ueLpPtdFoutuC6hcO1111cqSTwuQDT1bxFfzeNmayWv72O4hKntU:ueLttdFoS9TwuWJ2mwvv
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 70b1378897a59d926532c08b8aee7033_JaffaCakes118
Files
-
70b1378897a59d926532c08b8aee7033_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 304KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 20KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 266KB - Virtual size: 268KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE