Behavioral task
behavioral1
Sample
73524643cb30e52e8534b5d197740f88_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
73524643cb30e52e8534b5d197740f88_JaffaCakes118
-
Size
139KB
-
MD5
73524643cb30e52e8534b5d197740f88
-
SHA1
4a8b14815707c0606fcc700fbc3d8b9e92fb6ab0
-
SHA256
8c55c76e8e1950651abf05be8a66a35690de2714b975a28b954d229b0b4660c1
-
SHA512
12ca1c4b6461d6bb136e15a1b9cd6ea7830efa5ef94b3d74f0aa2cad47c1b21d8e7805c5007aeea4910e269681d1b3bc911d341b272be81966c5a735078e6a51
-
SSDEEP
3072:62yNMipf7MMokmIYd9spC55Xe8tCAS+T+n1Vc4C:62sMWgAmIa5he8tf3wc4C
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 73524643cb30e52e8534b5d197740f88_JaffaCakes118
Files
-
73524643cb30e52e8534b5d197740f88_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE