Behavioral task
behavioral1
Sample
72b1ae1327bf61c167df66ab9cbda5fd_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
72b1ae1327bf61c167df66ab9cbda5fd_JaffaCakes118
-
Size
103KB
-
MD5
72b1ae1327bf61c167df66ab9cbda5fd
-
SHA1
7ce72d5dd53fd33ef9683aae87b03830df32b745
-
SHA256
91717e807f035f0d01a7e6032a1d580fc2c205c86ad7ff8188fc98b5dafb1202
-
SHA512
51d9da3a5347b11338d338d241f584f2c08e51ce9c0d539e03ccb27ac9abc1eb6eb5f029a8b38b17c13409a7698a85bbd13a149da1cf3cb044cdc35b68711915
-
SSDEEP
3072:GtH2TlR3Q/0PyQ7q4aOuuE6fUvindC5FK:02TlSwyXwE6fI6CbK
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 72b1ae1327bf61c167df66ab9cbda5fd_JaffaCakes118
Files
-
72b1ae1327bf61c167df66ab9cbda5fd_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 9.0MB - Virtual size: 112KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1� Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 34KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.A.VI.RA Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.F.U.C.K Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE