Behavioral task
behavioral1
Sample
70d1f5f25d03aee8e2a31b80539f41cf_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
70d1f5f25d03aee8e2a31b80539f41cf_JaffaCakes118
-
Size
70KB
-
MD5
70d1f5f25d03aee8e2a31b80539f41cf
-
SHA1
a74ba9d63a986d9979c77656b7d28a035857823a
-
SHA256
d36f7ddce7ca31e7bfba0c55645b9d149ee91322ad9c5dec51bde638cfe47160
-
SHA512
129c199f573350df5db978e3686ada9c9af03f34d56528133841ba41126dfd377ec1f3644f587580debab3c764e68c788d4608d48a573656f535668f7683ca2e
-
SSDEEP
768:ZY2HbIp2+y2I6yZhkPkXyvR9eV4p5CHIZp1argVesslzo56fwv7:ZYYy2kAZhQHaVq5fMgwo56Yv7
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 70d1f5f25d03aee8e2a31b80539f41cf_JaffaCakes118
Files
-
70d1f5f25d03aee8e2a31b80539f41cf_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE