Behavioral task
behavioral1
Sample
742b5489fcb49a2294e58017fd8628b8_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
742b5489fcb49a2294e58017fd8628b8_JaffaCakes118
-
Size
17KB
-
MD5
742b5489fcb49a2294e58017fd8628b8
-
SHA1
b0b72898cbd1878b47fbd8368abeffc22e790982
-
SHA256
46653b258c996efc1fd8434bf2759f4909dfa23d5b14ae0d8e2fcd3a92820cfd
-
SHA512
5cc8ac36fff3c6bc76c3de74acc4009360e2b1e9ec162121b72c161395989375fba7e8243831ecac3c044a207af68f1a40444048f6f6be5d900bd8ebd339d42f
-
SSDEEP
384:ST4gn/qTKd6WvAcmIQrK2xqK+LGXxNLXaxbbZYd:w4WqTKU2RmIcTBQuxpXalbZY
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 742b5489fcb49a2294e58017fd8628b8_JaffaCakes118
Files
-
742b5489fcb49a2294e58017fd8628b8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 80KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.heb Size: - Virtual size: 1B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE