Behavioral task
behavioral1
Sample
73c049f73c5d682965dd4446558b7d5e_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
73c049f73c5d682965dd4446558b7d5e_JaffaCakes118
-
Size
127KB
-
MD5
73c049f73c5d682965dd4446558b7d5e
-
SHA1
aeafc74311ec56a4e5862522c360d13590e5a45f
-
SHA256
5045c845ec7849a29ff23fa11682259b56e288f8dcbd832c6ee4d6377bbfea39
-
SHA512
b90d26c9fbcdc72e1bf5f4015379e26eb1bc54f9728343fee0909997574310f49413d7429ecb9058a895f8b04da21d524003fbbb53d5a9f3a631cd4bc129db93
-
SSDEEP
3072:cOXpHv1O0KO/u0cS1AahUoyTK0OMhvUPr3aTeNDKYiPYFPNiGAdIout:hpEO/u0TThUol1o63KnvYFPcGAdIoS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 73c049f73c5d682965dd4446558b7d5e_JaffaCakes118
Files
-
73c049f73c5d682965dd4446558b7d5e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 52KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 123KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE