Behavioral task
behavioral1
Sample
72414e98a15ff59c5bbf164d2fdb708d_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
72414e98a15ff59c5bbf164d2fdb708d_JaffaCakes118
-
Size
123KB
-
MD5
72414e98a15ff59c5bbf164d2fdb708d
-
SHA1
a14e5a0c3f252d18b406921ba63797c5e83abe37
-
SHA256
cce3d95e9facc5e9fd259184433cdfa1de5c825c33302f53f149799be286efcc
-
SHA512
d433522b9fbc87f94583bcc945674b5e752169568f874c0f6f28467dd436b2639a29373bc8cfc0a49a523e146bedaf2e446883b27a5d799e168bf067eaa928cc
-
SSDEEP
3072:NeSQ41MZrrOwzrq5Ss9eYfphfFQkUcot3EpeBWLsk:NVYrJrOSsRwcp9
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 72414e98a15ff59c5bbf164d2fdb708d_JaffaCakes118
Files
-
72414e98a15ff59c5bbf164d2fdb708d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 107KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
42vab535 Size: 62B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
oqvrztrg Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ