Behavioral task
behavioral1
Sample
73c864d0e7868b735647d66f59ac0936_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
73c864d0e7868b735647d66f59ac0936_JaffaCakes118
-
Size
784KB
-
MD5
73c864d0e7868b735647d66f59ac0936
-
SHA1
f220c96b7cfc5458861ba3b80e880114bb4ed067
-
SHA256
b5005c63f7785d435d298c50e527eb5486b8bc8e12fe56cea6bba44ede60aa46
-
SHA512
ebcd5313fcc056b2d211f0e1a4d082597a83ba92f6057e5b65e9dae5754e3e729e7e33acaa01badbf6803c66c0160e2e3e3ea7df35b49be2d705aab810f17315
-
SSDEEP
24576:2WaTc88Wc4NN0K8z8qYvwgYBrAM2++YwtaY40j:oc888NN0Ky8qowrrtu
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 73c864d0e7868b735647d66f59ac0936_JaffaCakes118
Files
-
73c864d0e7868b735647d66f59ac0936_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE