Behavioral task
behavioral1
Sample
75c107339b534f56c5d3d0886ac389f1_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
75c107339b534f56c5d3d0886ac389f1_JaffaCakes118
-
Size
784KB
-
MD5
75c107339b534f56c5d3d0886ac389f1
-
SHA1
50a35b64446938995da492812829fd0017496143
-
SHA256
70f15d38ad03bc05d063c9066051ae00e7e9e15a2aded64f4aac8370e1ff0cc9
-
SHA512
cc4494fb6ce72622bb4a22c812a79e3eb0dfd463f71f5fb0c5cd40b241308c11a3e24509fda8b7e6e84ddd784818b9f93ad5117363297efeafbb63d7147d8437
-
SSDEEP
24576:ehkAtEpPPAHjzvYWCQeLdnvmm7gWDHjezDh3:SkfpQHPleAmsWTqh3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 75c107339b534f56c5d3d0886ac389f1_JaffaCakes118
Files
-
75c107339b534f56c5d3d0886ac389f1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE