Behavioral task
behavioral1
Sample
72b0b3265029eb33b734533dbc77f2c6_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
72b0b3265029eb33b734533dbc77f2c6_JaffaCakes118
-
Size
961KB
-
MD5
72b0b3265029eb33b734533dbc77f2c6
-
SHA1
c30dd942133aa0f1e4beaefa14eabb0bd54ac4f1
-
SHA256
dfb578bab780f299360427ff11d2e5854b51b32c66b803a644e670bd279f6e28
-
SHA512
851d2f066b11e62561ae3f945160578192ce3e04c6a5336dfca85aaf0752be517c02c4a703c5bdcf897abce8b1dac64168139d64bd17537e9be5c240341e3271
-
SSDEEP
12288:mixfPkeFTHUVbyroX5Yzcl+lEyvou0/IVxPEQntX505lNkErPZj08JRVyQPpVixQ:AeJHnkX50T30/k7x5OCE1j13VyQBVUAL
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 72b0b3265029eb33b734533dbc77f2c6_JaffaCakes118
Files
-
72b0b3265029eb33b734533dbc77f2c6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 916KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 843KB - Virtual size: 844KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 112KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE