Behavioral task
behavioral1
Sample
72c957b905d03cc9e636504ed7c55a81_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
72c957b905d03cc9e636504ed7c55a81_JaffaCakes118
-
Size
784KB
-
MD5
72c957b905d03cc9e636504ed7c55a81
-
SHA1
103fc2c045a8594bc9f491c4d8afa6051a2e309f
-
SHA256
a594d13daad5f26998522262a44e7437e4276ed00f54b0a872d3c478d153b9b3
-
SHA512
405d0ce3304c6ca6c472a495db5be002ffff6da52c589792f3be6f8dcd0061071605f8bbfc110946bb53eda0e08fbb27e4a317d2a2cf97fe84be1a9036192f67
-
SSDEEP
12288:rexawW7x2W3jAdp6Lf/K1+1HbsFXkH2y8LriErbyNzUYdoPzQikzN:kWAq8dp+DZbckHN8LriEHOgbPzSzN
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 72c957b905d03cc9e636504ed7c55a81_JaffaCakes118
Files
-
72c957b905d03cc9e636504ed7c55a81_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE