Behavioral task
behavioral1
Sample
73d92b3ce9c48818d713101a6a138dab_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
73d92b3ce9c48818d713101a6a138dab_JaffaCakes118
-
Size
133KB
-
MD5
73d92b3ce9c48818d713101a6a138dab
-
SHA1
cbb29999f6fbf70e4d4382019fa730cdb8fa0b02
-
SHA256
c251334cc4e570870254235514095985317742b990f3a6d31665c16ebc7a0627
-
SHA512
c663f11d120983e14939a87856c08d58acd306913f707c2eec23761ba52f0a4429ae6c51b9b5b3fce3dd6fc163f93171ab690e687384963b4dfe5050665f1074
-
SSDEEP
3072:NwHi+R3eBewbLFjWqNxg5X2M1GrO7P/aOS09kvcF9PS7ZZpJbIkp9:qzsbLFLNxgp2qsikUmZZpJbB9
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 73d92b3ce9c48818d713101a6a138dab_JaffaCakes118
Files
-
73d92b3ce9c48818d713101a6a138dab_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 112KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 69KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 63KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
psfbwuo Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE