Behavioral task
behavioral1
Sample
73c480f1aa6f28d96175aaf8d38144b3_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
73c480f1aa6f28d96175aaf8d38144b3_JaffaCakes118
-
Size
784KB
-
MD5
73c480f1aa6f28d96175aaf8d38144b3
-
SHA1
dd0b4480332b2cf3455e62ad1d2af9d81c70839f
-
SHA256
da903a665b14eae13d712dc313f9b7d0d362b2ffad2f040ff830a0d68956b588
-
SHA512
dcfd58cdc0abb7938d95b4d59cfd1796231e2d80669bf79a8ab9f7cb7fa39a99cf23ef34c5f8ff7620d03d7381ef9bc83ec15cfb8cb591a7c35d5b388ba98fb7
-
SSDEEP
12288:3k52279Lkaiuhye0YQZ/gz9uq9dod8B1+sGBEkTk5dSAdFw5IhjYak7NJDE:3wX9LBiuhQYAEdodWpGB9kDrw5SzSzD
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 73c480f1aa6f28d96175aaf8d38144b3_JaffaCakes118
Files
-
73c480f1aa6f28d96175aaf8d38144b3_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE