Behavioral task
behavioral1
Sample
70ed849d9946562cb65c380d511958d9_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
70ed849d9946562cb65c380d511958d9_JaffaCakes118
-
Size
784KB
-
MD5
70ed849d9946562cb65c380d511958d9
-
SHA1
2b94794aed7588f2db1ed1d27528b992e38c3eaf
-
SHA256
81360c990addc3aee2f281e00aaec11701ad26a67a695803fca3c45d79fa4d00
-
SHA512
1ae3938f3b128bba97cdfc6d47df5f3b4b41a0f8bc6528a21ddf55b562966f532de0d8bd5431f2f53adb13c4fabb57a9260a4a3ad3ae5cd7fa9f1fd819a82516
-
SSDEEP
24576:1eQEAPwBpob/CPPglYG+aqIOuLJYstt+kE:0QE2w3oGXxG+aqiLvts
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 70ed849d9946562cb65c380d511958d9_JaffaCakes118
Files
-
70ed849d9946562cb65c380d511958d9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE