Behavioral task
behavioral1
Sample
761f26ec7b13152cad9be63fd5e703d5_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
761f26ec7b13152cad9be63fd5e703d5_JaffaCakes118
-
Size
90KB
-
MD5
761f26ec7b13152cad9be63fd5e703d5
-
SHA1
c3e3e6f93219e6b4eb2bc00975b2ade0394e31c4
-
SHA256
2f49c91a07823afd611a71ed0b4ad9e2731471f2fe7f8f908b13f3a3b7883b16
-
SHA512
968450e4a2183b1707202b5ddbb5c40d437542efea57ac8073b2c4842192f888d8cdf3d21aa0b3facc8ca8832308b74cf7a907c1a57058f9c83194ab81d4cbdf
-
SSDEEP
384:Ca73O2qsKOI9UwTPs5VJUeezXYKs25gkOYBS54n8jo7:CXqI9UcPKVJUeezXHdvnz7
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 761f26ec7b13152cad9be63fd5e703d5_JaffaCakes118
Files
-
761f26ec7b13152cad9be63fd5e703d5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE