Behavioral task
behavioral1
Sample
76204e18461f75f65bfaade0de1afbdf_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
76204e18461f75f65bfaade0de1afbdf_JaffaCakes118
-
Size
650KB
-
MD5
76204e18461f75f65bfaade0de1afbdf
-
SHA1
541fad6c229e9118811b6a2392d33b5ce7717b25
-
SHA256
e6e6a2965e5144aba135543611e5f487d234e41c89c7045f34d5753388e0209d
-
SHA512
4d30d83ce60e028745f678d0b753d8d8553f879d5d6e61022ee65b4e15fbf216a712eeceacbb22a1df7f4bd6577be3fe72293636f0520f60fe5ed9bd351fbc2a
-
SSDEEP
12288:Bxz9HfAsIfDn1Ct3DIi0S80hrRZaqWR40rHeluaL0dUiuRm2Bao5:Lz9HfApr4NJvhjyR4kKJRi0+4
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 76204e18461f75f65bfaade0de1afbdf_JaffaCakes118
Files
-
76204e18461f75f65bfaade0de1afbdf_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 264KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ByXueLuo Size: 165KB - Virtual size: 652KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE