Behavioral task
behavioral1
Sample
71126d4704da068e81028873c79c5e16_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
71126d4704da068e81028873c79c5e16_JaffaCakes118
-
Size
223KB
-
MD5
71126d4704da068e81028873c79c5e16
-
SHA1
1309e026200ffa24fd368c9802614d16ca03b289
-
SHA256
f9ac3f83481ee864ac7a622b42b9a38dab0fb401eee3c5e257c73fc8f74ddd54
-
SHA512
d7d0758820914ceb8b01ad39d5385b1e94e4f6d2de6f25c6ace7f21845323777a151188837dfcd2ab82d819608f06f886d5962f9fbb7c7122bcb4fe81e8fece9
-
SSDEEP
3072:UhfR2TBwrOOsr3uIGeAkUiTdiqXpsAaD+xaVcpltSHvLKPKKYPLi8j16jwb:wMT+rOLeVLYRi9VI4jKiKYjN
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 71126d4704da068e81028873c79c5e16_JaffaCakes118
Files
-
71126d4704da068e81028873c79c5e16_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 120KB - Virtual size: 120KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 69KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 33KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE