Behavioral task
behavioral1
Sample
75af6bbdf47fe15a4888d30efce2bb75_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
75af6bbdf47fe15a4888d30efce2bb75_JaffaCakes118
-
Size
81KB
-
MD5
75af6bbdf47fe15a4888d30efce2bb75
-
SHA1
75c86ac23e5848c95b12e54c67fad74cc3bf5e6f
-
SHA256
9f8303e096b52ba1b83becef4f1f6b7e923548fae7f2a6e3581303092bba52dd
-
SHA512
866d2a70607b2994820c774e5c5b7741104a13359d3e4dcf5ff574e23a90023d4cbb50b4f88cb8574ff18ebe7d6b3dc4d4117e0e22b4b0d6c6f2615ff49ba92d
-
SSDEEP
1536:rPMOEBL8UEtO9S+OxVNvD8KaXOkO413gnP63B:L2rEWS+eVNv2ddgP63B
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 75af6bbdf47fe15a4888d30efce2bb75_JaffaCakes118
Files
-
75af6bbdf47fe15a4888d30efce2bb75_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE