Behavioral task
behavioral1
Sample
7548d2b07b9055f8f2d185f80e7b0611_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
7548d2b07b9055f8f2d185f80e7b0611_JaffaCakes118
-
Size
248KB
-
MD5
7548d2b07b9055f8f2d185f80e7b0611
-
SHA1
682feb4865705a0e9932500b68b4c261538f59a2
-
SHA256
092b6da5e2ddad7dac0e49d6b7763f144f11b86fcc69ba159e0a3af1297a9b80
-
SHA512
6e206b58c61db0e206435d2c2c35c61e79fae80718c2fa79d8c2aed557646af0d0f1e7b65a48b0aab828d3b64cf5ab5b21105ce236eb1193212db2be198618b2
-
SSDEEP
6144:PK0VhrEUKBX5U+IfRw2ityC9/GO44Yf2f:S0j3YX5LIfStyTu
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7548d2b07b9055f8f2d185f80e7b0611_JaffaCakes118
Files
-
7548d2b07b9055f8f2d185f80e7b0611_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 116KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 222KB - Virtual size: 225KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA