Behavioral task
behavioral1
Sample
75b59878979091cfc165a4fd7b8d6a7d_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
75b59878979091cfc165a4fd7b8d6a7d_JaffaCakes118
-
Size
170KB
-
MD5
75b59878979091cfc165a4fd7b8d6a7d
-
SHA1
c0b2422b81b47bd77db06e8a88decc06bb4d4134
-
SHA256
71a34d908b72f8fc42b29764c00fda532ace4532f248a6f15fbdfe94bb0a8228
-
SHA512
f818ef8a98f7a10644fd7ab3ffeb5855ef6656d50f732a18989e6c5335917afd6f6340699a8d9c7478ef193fda705c2d4fe892866a1b0dc36e98fc8faa427281
-
SSDEEP
3072:Fzp0T7DNL/2FpoMc784sSd9K0aG4fyNIsRIiiHvEwYMkw2O/jNLdQmoTXkjjoutM:Fl0nDUF4aS/K0aABROfkw3jNCmoTUjjq
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 75b59878979091cfc165a4fd7b8d6a7d_JaffaCakes118
Files
-
75b59878979091cfc165a4fd7b8d6a7d_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 80KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 166KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE